{ "Event": { "published": true, "date": "2026-04-25", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-25", "timestamp": 1777162530, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "21cce58f-bc32-45cd-b2b0-fea0e3bae556", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1777075327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075327, "uuid": "1b990ef9-bcda-4141-af4d-4ad87c2823cf", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075327, "uuid": "51a4befa-1758-447e-b37f-65a72a01ac96", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075327, "uuid": "b828acab-f0e6-433e-b133-991d32b6eb75", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075327, "uuid": "9e68e182-acee-41f3-949f-5d0cb3dde6b2", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777075327, "uuid": "da99deb1-aa2f-40fc-a034-a8b06b65aa59", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1777109418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109418, "uuid": "4d2c4627-75e4-4211-a707-dbb07a1c7576", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109418, "uuid": "93ecd1e5-cfe4-4d54-bd59-f5d83a55e9dc", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777109418, "uuid": "1b13892d-4085-42ab-b4aa-cb771e3eb46c", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777109418, "uuid": "d53d4819-69c1-40ee-9efc-7a31fed134ac", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777109418, "uuid": "839d34b0-9383-4361-a29a-c569cb0f0db8", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1777075463, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075463, "uuid": "906663f7-2ad0-4901-9a17-946c578fe4ca", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075463, "uuid": "6d15d035-7db7-4f30-b45f-5eda51088387", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075463, "uuid": "141ac20e-b599-4a65-971e-4bf35405d52d", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075463, "uuid": "288752ba-33aa-40ad-9d3a-7fe82265e625", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777075463, "uuid": "0f10b15d-3867-48d6-9b5f-8b99dd0e029f", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1777075288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075288, "uuid": "3012362e-fe52-4a8b-b94f-5af8db89fccf", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075288, "uuid": "e1d4b7d6-48eb-4024-9d1e-fe8f8abdb5e1", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075288, "uuid": "0521b3f3-0d0b-485c-9023-ddecf7b9925b", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075288, "uuid": "7d357580-c329-4423-8da8-ee6a063e3e51", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777075288, "uuid": "a622bec4-edd5-4290-b872-a1dc9c3a6e9c", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1777076527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777076527, "uuid": "8ca10faa-7960-48ba-aaea-ffd63fa9dda1", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777076527, "uuid": "286c7aa7-0deb-4fdd-b051-5389f898b1c1", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777076527, "uuid": "a2731bb5-2ae7-4514-a2ed-8f06d3bce436", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777076527, "uuid": "8db76a64-1503-40ec-bba9-dadac5230883", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777076527, "uuid": "fd30bdea-3faa-4139-aca5-9f1bf97a27a4", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5498fef-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1777159864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777159864, "uuid": "579fde5b-7696-4ba6-afb1-6a9c9f21fc18", "comment": "Malware payload (CoinMiner)", "value": "5616a3471565d34d779b5b3d0520bb70", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777159864, "uuid": "7ad78681-6197-4f5c-abab-22d16d47c87e", "comment": "Malware payload (CoinMiner)", "value": "9194b57673209c8534888f61b0cdefa34f463ae50cd78f72ab2b3348220baaf9", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777159864, "uuid": "1cc0b595-ba02-4f7c-befe-3d93040ecdab", "value": "T151563345F4809837F139153629F980F2B07DBC7297244BDBA35E2AA56E317D83239A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777159864, "uuid": "3efc0858-2c3b-4396-8fa7-7dbc2ce0beb9", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777159864, "uuid": "2d061524-3651-48b3-890c-b295f415930c", "value": "98304:RLbSThOfTCiFBXmfFs+JhEpCVoR8oMEOJ6Ty3RvX+UGD823FUuzmH:tBfTCiUs0VSLOJgyBGUA8Ch8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777159864, "uuid": "dd2d2d8c-16ca-4436-a731-fc0ee46ac0ae", "value": 6227159, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777159864, "uuid": "27c0df82-dc8c-411f-91d2-4418227ad45b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21613848-1122-11f1-8369-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1777109636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109636, "uuid": "bc6abff3-860b-428f-93fb-6d3e2c1cf82a", "comment": "Malware payload (RedLineStealer)", "value": "838703d503b5c20e07412c080c1dfc62", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LoadedPL", "colour": "#3aedee", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109636, "uuid": "60e3897e-8ac6-4d5c-82b7-654931de0455", "comment": "Malware payload (RedLineStealer)", "value": "599f8044ac833677564223f34b28fc9286c40683095485ba366ec465accdfa74", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LoadedPL", "colour": "#3aedee", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777109636, "uuid": "306238ac-48c9-4518-abf6-90556ae4c1da", "value": "T1C5645A5833E8CA10DA7F4775D861D67093B0BC63A552E70B4FC4ACAB3D32740EA51A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777109636, "uuid": "966f954c-c062-4bd6-9058-2d8bad728382", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777109636, "uuid": "3e9481ba-b1e2-4074-87c8-64697e8d83f6", "value": "3072:KcZqf7D34dp/0+mAOkyoSMQQgqDB1fA0PuTVAtkxzl3RceqiOL2bBOA:KcZqf7DIHnmn8B1fA0GTV8k3kL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777109636, "uuid": "b8d262ea-6038-4a60-9894-9141883ca1db", "value": 307712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777109636, "uuid": "27971354-91c9-4138-a473-c807032ae7b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ded9fce-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777153092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153092, "uuid": "5200e8ec-ce61-4a36-b3b6-f261741a96e7", "comment": "Malware payload (Mirai)", "value": "7220f3b8f2bd81b8ce6d011b0243c00e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153092, "uuid": "fc16b373-310a-45ea-afa3-c739b6f6863f", "comment": "Malware payload (Mirai)", "value": "a0c7f4d61271ba17052c25df0c6b0d275a22455b3f94cde063d456dc07c69957", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153092, "uuid": "a409089b-2280-4551-bcf3-9928af9f6db8", "value": "T12E83F719BB914FB7EC6FCD370AA9170134CC591B22A97B3A7934C918F60F64B06E39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153092, "uuid": "d96e35b2-5056-4036-883f-cb2edf8c9414", "value": "1536:p7UMCN+nMZHavzjkIPLMb3dJLEbqP8AvJW5coYZl2s0CVEJNl:p7dCN+nOavz/U3dm5coYNVANl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777153092, "uuid": "45bacc05-3742-4bd0-a0bb-1abe8a0ae83c", "value": 81928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153092, "uuid": "f3c4a346-107d-4db6-8e14-594bf1b40871", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f3ce4a9-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777153092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153092, "uuid": "46d53c2f-5879-4ac7-aede-685793fc5f1a", "comment": "Malware payload (Mirai)", "value": "5a4f49fec7c52719369c9465f61340ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153092, "uuid": "873b74b2-f817-4fc6-afbd-404736407fab", "comment": "Malware payload (Mirai)", "value": "6f2720000cc39c766bbe14b34221a38f9b3b143bd1252884059f781eaf1d6965", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153092, "uuid": "5925990a-59c9-4a56-8658-c4c87aedecb8", "value": "T10EE32B46EA808B13C4D6177ABADF424633239B5493EB730699287FF43F8679E0E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153092, "uuid": "8e81ac53-3d01-4d9a-83a7-21e547a0d717", "value": "3072:LfIWnM9uTk1zXxqaNbIkz/rnN/9Yx5TQBuPPDM/9+10g38VnE:LgWnM9uizAaNbIkz/5/w0BuPLM/9+10i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777153092, "uuid": "a02910ec-6544-4a67-b365-0902715fab28", "value": 145461, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153092, "uuid": "d5ec019f-cef7-4398-84c3-92b0bf4fb54d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f3e4a77-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777153092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153092, "uuid": "3171d15e-8e2a-402e-af86-616ca29dd557", "comment": "Malware payload (Mirai)", "value": "25d0591605242c27f2d737ab3c8e261a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153092, "uuid": "fceb6199-fc35-46ec-b75f-0b2a13fb1fcf", "comment": "Malware payload (Mirai)", "value": "666d8973a9eb59ce672cfd7727371548425da4bd38002c06930f8d867938b13e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153092, "uuid": "60c9cfa9-d5e8-41e0-8065-6aeea082e7c7", "value": "T15373B81D2E628FADF7A9823447B78F21939C378627E1D685E25CD6001F6034E645FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153092, "uuid": "309d9cea-d47a-42a1-a776-f8a68627f696", "value": "1536:uuT16ORJA194fspAuAWbQ9wXMdUBvcXeZg/Z:uuTYO019NjXMdUBvc9/Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777153092, "uuid": "4a6ff3e5-1b9b-47c2-a8bc-91658518d87b", "value": 80712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153092, "uuid": "75e3c537-9df5-49fc-8f39-f37dd32bcfe9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ffef862-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777153099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153099, "uuid": "e3b3c675-d0ca-4c53-841a-f6c30878645e", "comment": "Malware payload (Mirai)", "value": "50140411956f16524b91c9ec39d3e470", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153099, "uuid": "acfbb51a-f45a-44a8-9f6e-a9c5d13e35c1", "comment": "Malware payload (Mirai)", "value": "9c59f0253c0a4da4c2225b49432fa395b3738389901c402f6316f8b5db862bc9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153099, "uuid": "97f36165-f462-4f46-8c85-e073d39b723f", "value": "T12C530891BCC19A13C6D01276FB5E428D332667ACD2EE7317AD162F11778B82F0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153099, "uuid": "5f9057e8-2d50-4730-a6f4-c21ace601e78", "value": "768:Z5MK4WsXHawudLng7lBbTcewdqVF5WUJ0hVCqYHr/NRFocFAUdJ7MUvg7r0+ifmJ:jD4VZML48ewdMXNJuUAUm5iuKfd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777153099, "uuid": "755c96dd-3852-415f-b8f6-8edab6f908d9", "value": 60844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153099, "uuid": "6a31b64a-af32-4f2b-9dd6-abc32a3bf3fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70015093-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777153105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153105, "uuid": "dada6003-a1bb-41a5-a8f7-45eeafd2146a", "comment": "Malware payload (Mirai)", "value": "71be3fc27c33dc9d945ced275ea715e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153105, "uuid": "5c5b42c6-fa1b-4151-a802-5ef99c49b59d", "comment": "Malware payload (Mirai)", "value": "61fd3ee11537b9e82d2c8e35593b6f4cd66707775f481cc4c23d8dc9e0b6ebc8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153105, "uuid": "7ff6c4f7-5e08-405d-9a5e-d7d12dfefeb9", "value": "T1AE3338C0E64BE8F5FC5646742077E7329B73F93A0029DAC6D368A533A992605E6473", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153105, "uuid": "74a072ff-8509-480b-aab0-4d526c0ad1d7", "value": "1536:K9pCH13EPvQ7PKVjC6ymlkNspmXmZGb+RjwLS3:rH10PvQ7EjymlE4pZGylwQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777153105, "uuid": "765f2ad8-97e3-412e-a7a6-6bed467d4a2a", "value": 54352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153105, "uuid": "dc47117d-723c-42db-987d-c39c4fdd14da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7004a733-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777153092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153092, "uuid": "5f93992c-8315-420a-9f70-dc29d18aec31", "comment": "Malware payload (Mirai)", "value": "134291d2fba5958b7c8c4f8fbb08a708", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153092, "uuid": "4bf1ec43-75a8-4524-bc6e-8b481c7d8566", "comment": "Malware payload (Mirai)", "value": "a6626bb435e68780973dd4a50adeef84af904a96be2b3e423c3b75c15821b499", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153092, "uuid": "c64dfc6b-41d8-40b5-847b-0652219bc6e0", "value": "T12B731956B8818A12D5D502BAFE1E118E33131B7CE3DEB3129D206F24778B96F0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153092, "uuid": "a57e24d6-cf36-4800-b9c0-6070f054dbf3", "value": "1536:RNnxyKCJqGVmGsVFyEbZAfiQaaTtc8mIYiXNxNoqC7fw3W5/Y0:9qoGgGsyEbZA6QaWvNXoqC7fwG9b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777153092, "uuid": "2c7785d3-bb0d-47f1-a479-b8a6804abfd1", "value": 75056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153092, "uuid": "e4540534-fe0e-4566-8145-ddfaca7400d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70040b83-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777153159, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153159, "uuid": "6efc3df2-82b9-402e-88f1-880d0dcf715d", "comment": "Malware payload (Mirai)", "value": "5012a5252a69cd0c6235284285cc4d4e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153159, "uuid": "137ce129-cea6-45c5-ad77-aa91389f1b99", "comment": "Malware payload (Mirai)", "value": "8bbf7f1415d21d66d15700adfbd66a4bde7032c916b5a2bce2c497d8f04d2df0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153159, "uuid": "30f033e4-3c11-4ce9-8dfb-05e7553ccd47", "value": "T1C0532890BC819A13C6D012B7FB5E428D332767A8D2DE7313AD266F11778B91F0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153159, "uuid": "f5b0d19b-ca36-4473-8c72-1972a9a659ba", "value": "768:izv8bekhpK7h23tbClhceioot90OmKOVCoS/NRjrrb1qHMkAgr6OuNXn8V3OEv9c:081hpK927eitv7XD7kl6VX8tOEv9L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777153159, "uuid": "ebecd617-6892-4d74-b4f2-3ffdd971323e", "value": 63924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153159, "uuid": "b0cde0ee-664b-424d-b294-d3b51622dd58", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "700d7ff7-3f30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777153092, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153092, "uuid": "7381fa82-d3f2-42fb-9528-eae312fa1e7f", "comment": "Malware payload (Mirai)", "value": "d31c3bb7ee0f0a7798da47bde1b6e555", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153092, "uuid": "02437322-1a1e-4ca6-92b7-5e85dbe680a0", "comment": "Malware payload (Mirai)", "value": "10c177d688ed4dc7492308f80e632be1de4a723b2352864c178c36320f4d6630", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153092, "uuid": "b23976da-5bb1-42bf-812f-585257234f2c", "value": "T104532913B94180FDC59EC174172AA63BF673797D0235B3AE3798FB126D49E214E2E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153092, "uuid": "40cf2324-6e48-453f-9280-378ec96f440d", "value": "1536:CdRZSjx8V2X3+zJ1dBbL/6m2yMiQlSZstb+NBJspqlBzo:yRZS98VcuzJ1nbkyMiBqb+NdlBzo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777153092, "uuid": "12bec64a-e977-4573-85a6-1bf6f88813c8", "value": 63264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153092, "uuid": "4518ed52-9294-48eb-922a-13a985cd3bdb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19c5121d-3f9e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777148776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777148776, "uuid": "6b2f2a89-91f4-4326-9d71-cb2a74a3e00c", "comment": "Malware payload (Mirai)", "value": "bba2925487c609018029ab23f32038f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777148776, "uuid": "d57ac731-f0ff-4642-a7cf-2a19f5a93801", "comment": "Malware payload (Mirai)", "value": "01e6c07cd6d6f7c9b5d9af76eb1631ece66ac36c627668101cf2498b7e577273", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777148776, "uuid": "8e125b0a-19dc-4b41-8034-c5491fe5a9df", "value": "T1F263F19DA2EDF491C7BC6CBD752CB61922041DC364DA0B9D93304C99EB4272D3ACB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777148776, "uuid": "84ebcb49-1934-4409-9dd4-66fa50610885", "value": "1536:adIiaKp5QviVOtdYlregVIcAvbf1vvFjgBuRSSdbzVaSsTcgJ/0:adIV4OtdYLigQR/1VMa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777148776, "uuid": "3665fdf4-fdb2-40da-852a-6c29b577854d", "value": 73188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777148776, "uuid": "e2639bb4-6822-4168-9d17-36f59036ccfa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e95d8073-3fa0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127728, "uuid": "a4be12e2-f1d1-43a6-a32d-449a89bad04d", "comment": "Malware payload (Mirai)", "value": "6f16787976cc8a4420e2eca154d36cba", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127728, "uuid": "091df62d-7ed4-4727-ac22-e02dd51b3191", "comment": "Malware payload (Mirai)", "value": "61e2779702fbe93e41d2127a7f9a8ed4cd1c22d16e5af1b47c5f73be21b34ff2", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127728, "uuid": "5e98be1c-07bf-48d8-889d-97685c53fc90", "value": "T1305423E7CD0252E02035C7B3398E54D362616B88FD9C2C468C7AF4A49FEA5DF0275B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127728, "uuid": "f5146ee6-6c6b-4d85-8ed5-39f9f00eccd1", "value": "6144:1RrkQjdkJRjBrP2KsCwVZHpcMifEHK1tk0wEmG9aXwTchfu:1eqODwHPifEHK1y011Tchfu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127728, "uuid": "ae6f89ec-283d-446e-93e5-112b6af5fa12", "value": 280600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127728, "uuid": "72136d2e-c894-4a4a-aca5-f5bb8198d1ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a77c21cc-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777124664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124664, "uuid": "f0e916a2-a711-421c-9e30-7a3da2bacf9d", "comment": "Malware payload (Mirai)", "value": "91f829d9dccf9d101de0180ca11bd39f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124664, "uuid": "3b2aad6c-c555-4fba-a4f4-73e7b9d97fc5", "comment": "Malware payload (Mirai)", "value": "55c4bb14075bfbe162751d83df3cde167fde7e34c91646784526e25a5c96eee2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124664, "uuid": "4f8259d3-e875-4bc7-b619-d9991ca8fd00", "value": "T113533B02B2280A5FF9D319B0343F1FE197BEEAC035E0B689695ED7558635E332485E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124664, "uuid": "7aaaf252-f5c5-4b88-841e-8544d20ed545", "value": "768:LtMLxtiRFwLoDnud1kvSeq7Q4dPfGAsLmZ8BBSzjrYiyR7gHX1SPgIaalA:RMLSBq14Se4GHLTBygfGXAgIV+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777124664, "uuid": "2f7b6f83-cdba-4941-b8b7-b4d55462d5f7", "value": 64344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124664, "uuid": "22cfb305-6edb-4b5d-9e1c-2b2c44020eb9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cab41366-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777124664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124664, "uuid": "ebee3db0-d799-4f32-b441-395745c10bc1", "comment": "Malware payload (Mirai)", "value": "a339c10c3f8e3c8d9cce401dd8a8eb26", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124664, "uuid": "e86d421a-80d1-40f7-bcd9-555410f4a468", "comment": "Malware payload (Mirai)", "value": "3bffb48736b2b8bce58e86e7be860771d837c9f372b8aac35491eed10b80d1c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124664, "uuid": "bdbdd553-bc92-4b15-9e85-5f25abbb8c47", "value": "T1FC730A85B9819B25C6D513BBF91F018E33165BE8E3DE73129D201F607BCA91B0D27E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124664, "uuid": "a0fabe11-cc3d-470e-8051-34218f538c0e", "value": "1536:S9KnGSGYfkiu/ZwQNCJEHQXglNU6bO3d5yAMw1f91uwcWIWinluUsPMrQ:aEkiUZJNZHKMNU6ba4XwtsluUsPMk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777124664, "uuid": "e5b4a16c-b602-4c98-bf2c-df3acbc5387b", "value": 79852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124664, "uuid": "11b7f8ef-efb6-45ed-89f3-6f093982f8e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cacb2bd4-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777124717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124717, "uuid": "c3f550b8-6c23-40ef-bd64-cf8c9b514187", "comment": "Malware payload (Mirai)", "value": "66c192c1baa349306c22d8cf5d79aaef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124717, "uuid": "0f05c5b6-7e29-4f3f-92aa-a3fd3d977229", "comment": "Malware payload (Mirai)", "value": "41e5877f52d7d69353c51b97bd2f79b70d425251d5b917e39e273dc1724793d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124717, "uuid": "a7002d1f-4ab7-4832-9841-3de637393ee0", "value": "T1CA434AC4B183FAF1DC050178307BEB326E33F0B6613AED9BE7E455736855606960AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124717, "uuid": "5e08f3a2-1c94-449f-b9a2-a958a0e77893", "value": "1536:yOssuiundFq4ZthwLi/pXUfx0WbsoPMdQZl7dDFfG:vzuXndFq4ZthB/VUfOWooPEQj7dhO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777124717, "uuid": "bcbce835-38ae-4292-b48d-af44236f5326", "value": 60128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124717, "uuid": "7cb89571-22d5-402c-b9f9-f5306a93f35d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb0f5940-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777124664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124664, "uuid": "dda30399-0d5c-4d4b-880f-ebf84d8aba33", "comment": "Malware payload (Mirai)", "value": "35689cc9a575eece98e8a4d95b595417", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124664, "uuid": "a89882af-3f77-485b-bb93-9a67ec18ef5d", "comment": "Malware payload (Mirai)", "value": "2cc11f3027d109c59508025e9de121cb18b0f3c606135943e7668a92478c5c2f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124664, "uuid": "7d4fc1f0-5824-4345-bfad-6be792abc264", "value": "T1E193D706BF610FF7DC9BDC3705A92B05289C665A31A97B35BA30D818F64B21F19E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124664, "uuid": "439652b2-c38a-456a-ae55-4be1dd65e206", "value": "1536:BF2GXYZ8a8fnwEvLNPENIdhs9WZx0ZCufqShX:BFjXYyCEx0rhX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777124664, "uuid": "785c9adb-c574-43b3-ac25-75e49a3124b7", "value": 89504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124664, "uuid": "47fd9155-0f2a-405c-9213-03ae86a9e8db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb147d6f-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777124717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124717, "uuid": "6c652f7c-b304-4773-a815-0dc3d2ee1d7f", "comment": "Malware payload (Mirai)", "value": "5422a898e0305a4f2c764171bab5554e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124717, "uuid": "25e0840c-0127-4d75-88e6-0dc0de8983ea", "comment": "Malware payload (Mirai)", "value": "b5bd3e8a44064e57b8f19fd7bec905fa653a10f2d9790e609baab41c90623d7d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124717, "uuid": "2506462c-5cad-4d46-aa67-3a183a01aa7d", "value": "T1CC931945B8419B21C6D522BBFE5F018E331697ECE3EE72129D201B6477CA91F0E27E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124717, "uuid": "f21b960c-3096-4833-bcaa-91e3cb6ec76e", "value": "1536:VAnkkYHvMumqwnxCXBDfxlCmUzdUUJMyAMu1vWcadtotmLFxnxNlskixihzb:eYvMxqixyDJAmUzdBJXu9WRtotmLFQTM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777124717, "uuid": "a54baf55-9673-401f-883c-f71b6039d40a", "value": 92772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124717, "uuid": "4c42aa9a-382b-429a-ac30-89bf09275ec6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb1f6a42-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777124774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124774, "uuid": "21804c01-502e-4e39-b9e3-726383720cf5", "comment": "Malware payload (Mirai)", "value": "da7e754f5f953c7ffe587bc362ca5985", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124774, "uuid": "7c7cefd7-26da-4529-8fd6-26b98b192bb3", "comment": "Malware payload (Mirai)", "value": "de12026f859976f1300504a9732ecb668914df29e6f371a9e117cd33356f1b36", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124774, "uuid": "0761e229-fd15-414a-88e5-edc278b465de", "value": "T13E630891B841A626C2D1537BF9AF018E371497D8E2DA33138D255FA0778AC1F0D67F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124774, "uuid": "8675b218-2f1b-4010-83f1-d94265bacc2d", "value": "1536:8aDOMkJ1GdjK3GX9nuDa2LC3lmvDANvhWi5w5kwx:8aDOrmuDmm7AjD5ax", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777124774, "uuid": "ee7d997c-2c64-4165-bbe3-96f5a2691eb2", "value": 71036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124774, "uuid": "60ba3d69-75b6-4e88-a0bf-4fdb03512f83", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb1f89b1-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777124720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124720, "uuid": "019e555b-1505-4165-8269-cdf8d9753748", "comment": "Malware payload (Mirai)", "value": "c8580912238680d6ea886952666d7eb0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124720, "uuid": "cbd6e421-f062-43f1-b8a2-bd364449ff6a", "comment": "Malware payload (Mirai)", "value": "a31d3ad4fdad619b214002ffced938880d5c9f9a9bc13a3adcbbb41955a941b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124720, "uuid": "1d7f1892-a765-4d58-8292-502e46d9aeba", "value": "T18D838C26B5669F76C10306B465E68C350F52FDC54A632DF2F6A08EE940479E8F018B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124720, "uuid": "37531aa0-c940-489b-959a-6ee6208606da", "value": "1536:QakjZNHpYFtOwtzC7sHuu1DCfs3S4ok/qGI+GLL8RnACZ7NE:QLRpYzOvgYf+SL8G38RnA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777124720, "uuid": "06cab119-ce7e-45e3-8827-fe8a74fb218c", "value": 84932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124720, "uuid": "88c888ce-6e1d-4e88-9b6a-4ae000a6439d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb220a22-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777124774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124774, "uuid": "658bb787-3f4e-45c7-89c8-a7b64e4f3894", "comment": "Malware payload (Mirai)", "value": "a8d879c83e21ffc063e6dfa87ff8bf85", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124774, "uuid": "b9840aa5-5866-4a2a-aad9-b9b79f015243", "comment": "Malware payload (Mirai)", "value": "bab26bf2ccfc24ddbb686bea3cb40ba2ba4555609ccbd0d3f41c3987b32f4f60", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124774, "uuid": "2b383456-b8e1-4b80-8c40-fe2c6240b27e", "value": "T1CA833CD6B4029F2DF88BA5F5806A0E14AC3576E75B930F27B2B5FCE36D220D87901D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124774, "uuid": "85b005bc-76ec-469f-b712-1b31d5ad4098", "value": "1536:uNGDRwIVQL7tGyiXf2IgY8hhvNQfnqXJrQaB:uwDOIeftQX+l9SnSF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777124774, "uuid": "75959dfa-96a0-43a8-a7f3-20cb193a3f61", "value": 88324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124774, "uuid": "0c127402-5980-4212-b285-7de80adc3e77", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb379c67-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777124720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124720, "uuid": "45d6c3d3-1329-44bc-ad0b-339ecadea8a9", "comment": "Malware payload (Mirai)", "value": "6e07aa82453ab79f14294091d76d249e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124720, "uuid": "658f40a3-0a7a-4f24-89de-ad5c11a23e09", "comment": "Malware payload (Mirai)", "value": "f62bd6b5521a2300fcdd4bae1dd6db0c00b03c7cb2da39c30787ebcfdb9e0d67", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124720, "uuid": "94b96b1d-f7b6-4faa-b896-e9136bb53dde", "value": "T1B7B3A5193E21DF7EF79D827847BB8E20565437D62AF0C185E15CEE481E7028A781FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124720, "uuid": "71e67a1a-174b-452c-b03d-09858d6b730e", "value": "3072:8l/LbyWs45NfM2bR0FpY3/aXGAo+eEmKf:8l/vyKy/U/8GA0Kf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777124720, "uuid": "5968fc0f-6130-4ae1-b1d6-400da56c3191", "value": 117808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124720, "uuid": "1779e70c-7a0c-40b7-9f5d-d2c582ffff74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb37c370-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777124717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124717, "uuid": "aa3495f6-acc9-4ca0-bc8a-9a1964911b3f", "comment": "Malware payload (Mirai)", "value": "7cf57ac0b11fe45db6f5496d83691e86", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124717, "uuid": "a3072b2c-5c6a-4537-8534-d097411fd5b5", "comment": "Malware payload (Mirai)", "value": "a9fba86df96a672d1dbe32833b8ec81eeec35153d1990427f43b02417ed8d8d7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124717, "uuid": "a1ae832b-28ff-43a6-9395-53d3ebad10a4", "value": "T11A732A26B97A1E26C0D4B57E60FB8B11F6E1278E26B4C50A7D720E5EEF147006502E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124717, "uuid": "e29793f4-3ffe-41c2-8d1a-68adde01766d", "value": "1536:9D/B6f6UD5hAS7mo0DCCAXpSKV6v3G78nN9Wa:B27jqCt8v3GI/x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777124717, "uuid": "9eb859e9-4411-46fb-8ab3-379c1a8d7f4f", "value": 74848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124717, "uuid": "f5f071a0-a449-4a6b-9b45-d4503d5e8c7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb379881-3fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777124717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124717, "uuid": "ef65b1b1-f4a2-4544-8dbc-ced38caae5aa", "comment": "Malware payload (Mirai)", "value": "6613ccbd2130d1bbed8182b7f3bb3883", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124717, "uuid": "4c7bbd14-0794-42fd-aae2-5400a695fe1e", "comment": "Malware payload (Mirai)", "value": "0cb548ea4159131faeba7597eda608d4b9b2a0f67f7702aec5a6ded75771609e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124717, "uuid": "82ce1d81-7942-496d-baec-99b6509223a5", "value": "T1F0630891B881A626C2D1137BFA5F008E372457D8E2DB33139D255FA0778A81F0D57F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124717, "uuid": "353ddde8-cc4d-4d11-b8ef-edb66273047a", "value": "1536:yOTgWIYeMlktkUwnEU0+m7FcWS2RM8fhWtu5zPeH:yOTgWLeMDcJS2Rrpeu5K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777124717, "uuid": "66cb757b-380b-4f9c-82dc-c036130a2ea8", "value": 70956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124717, "uuid": "8680327c-fcf0-4ea2-9bec-447b2aa9612e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1066e82-3fcf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777116186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777116186, "uuid": "aab7852c-7aea-4cb1-9ffb-72121080708c", "comment": "Malware payload", "value": "64eb7ad3aaf9b6639ccc5c0b30b6e59f", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777116186, "uuid": "e7f44d68-4e69-49c6-a89d-51e18e2e05b5", "comment": "Malware payload", "value": "9df11356c5ac61d2aa7b5425e6322fc016b0ed5790dacb201396500b3eee03f7", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116186, "uuid": "ce716435-e30c-4b63-840f-4a5f9218c34b", "value": "T1D7F23B49BB58C12ADBAF0E7D75621A50167197521203CFD53ECC65EEFF937008612B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116186, "uuid": "bb4aa1c9-5f64-46e0-bb58-d62994e1df37", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116186, "uuid": "0419e9c6-547f-456d-9681-e58df06d19a0", "value": "768:dmQZqx1lYcTYbFyf8qsIVeljnbaoXbYC10kof:d0lYisIVeljRbPof", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777116186, "uuid": "9652cb5f-880f-48b9-a1ee-96e4f545ac46", "value": 36864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116186, "uuid": "19706b10-4322-4211-b96c-564ae0450fae", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7fcac08-4039-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777075260, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075260, "uuid": "bfc1dcf8-5763-49c0-9f12-fe64e3f3689e", "comment": "Malware payload (Mirai)", "value": "6c83afb00a88044f7d7753975a5ba9a8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075260, "uuid": "95e1bbfe-904d-48de-828a-fb38f6d46496", "comment": "Malware payload (Mirai)", "value": "9b83781344156ae1fd75a20de83f741bec1cf331581b61e9ebab50fd316dc765", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075260, "uuid": "f0f3e64c-895b-49b8-aa9f-83f7c4dcae9e", "value": "T1B7D2D0C3447BFAF1C02BA1F64AA992E1F5587C279E41437B29CE31BF9C62C943A257", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075260, "uuid": "75cf1f39-626a-4311-8fbe-a81b7c74593d", "value": "768:v8hzpUjpJn0JemDEHfMvHdUlELinNx021:vT3nSebH0eqs51", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777075260, "uuid": "ea7fada2-51df-40ac-b0bc-ff05baedddfd", "value": 29140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075260, "uuid": "393c150f-f178-4be1-8b9d-8c03e3192789", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd4c5582-4039-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777075323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075323, "uuid": "f4de110a-c152-4878-9d64-2bf859fa3862", "comment": "Malware payload (Mirai)", "value": "91017ac555a049103777c1241e0064d3", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075323, "uuid": "9eb6f79a-be12-43bc-befd-bebabb4e7a80", "comment": "Malware payload (Mirai)", "value": "08ecc09a46d148fa47ad446f18c83de712f48a7ac5902fa3e3fcb81646f5109e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075323, "uuid": "dfddaac0-4abc-4606-97de-63f2fa3bc2dc", "value": "T1FF55CF46F8408F62C5D12576F76F8268732747B9C3EB62069A189B343BD796F0F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075323, "uuid": "b3084b2c-3be3-4cea-a9c6-8e830d0da89c", "value": "24576:6z/qLvfxB+6qHxWiOeiJnaGYTAldxefibuFNib8OoOpjsHio3xPsv:6kfxB+bxWitGYkeM6NiYsIHiuM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777075323, "uuid": "40790ed1-ebf0-48c4-99ae-57df5ff8dec3", "value": 1298734, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075323, "uuid": "4876bd1d-948d-4c8d-8d37-a9b85ea61414", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa1a50ff-403a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1777075613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075613, "uuid": "79aa4c25-8106-40c6-a412-0cf2d0ba7089", "comment": "Malware payload (Vidar)", "value": "31bd9aca98e52528c6ed45144d5b85d3", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075613, "uuid": "16c000f2-4965-434f-8e6e-023f14140e2e", "comment": "Malware payload (Vidar)", "value": "a7ebd99e040e4334040b4d9609468c3fa709ef6fdcb847dbef76350e925c5632", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075613, "uuid": "dec938be-a03f-4960-b641-f5bff4506b45", "value": "T16FB57C02789105FDC099B73249F23681BB35B8580B3627C32E956B783E37BE05D7A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075613, "uuid": "126c6a5f-1ddb-4466-879b-da5d9b9ad1bd", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075613, "uuid": "589c9311-28ac-4417-a11b-2e64f0a75d66", "value": "49152:KmO+da2PlMLJDmJxA6CKAxQAMTn9EYPeWjde:KSrmLmn9E0k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777075613, "uuid": "c8a2ed55-3830-4cd3-bf6a-35dbb7dc2818", "value": 2487984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075613, "uuid": "b23b4687-5df7-41d6-b531-fffb21cdb301", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2c21f86-403a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777075708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075708, "uuid": "766a4805-1aa8-41c4-8c44-e227bc2b3fa7", "comment": "Malware payload", "value": "2528b35372c3e1267bc94f4489c9f241", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075708, "uuid": "346ea98f-69ab-48e7-a768-f2d418b750ea", "comment": "Malware payload", "value": "ccf7ca42eee667916cde44e23576ceb7c00ab53146ccbdd5978bd465baa99be0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075708, "uuid": "e3bf8667-6afa-4e5a-a022-2fc2e8ddacfb", "value": "T117E0D8CE64D08D7038454DE7B061490694CBD88D1BA24FC456C8107F584ED08B293F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075708, "uuid": "93beb608-8e08-4dfc-aa93-cd995d22490e", "value": "6:ebAAj73w5/KiYEGvwW2AVFhGq4XXQZrKGy3D2QZrKGygt9Me9Sn:7AWKZHY4uqDZrKGyT3ZrKGygt9Md", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777075708, "uuid": "6a0ba4b7-5fec-4664-810e-da033f866515", "value": 352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075708, "uuid": "5e874518-568f-4a0b-8c35-91439370bc81", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b7bce17-403b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777075883, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075883, "uuid": "2c4c3ebc-dad9-4555-8007-b5226e5de65d", "comment": "Malware payload", "value": "012364ec74d6beaeba730b798fb78612", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075883, "uuid": "80d7a5f9-fbf8-4f48-94fb-1ac3fed3e557", "comment": "Malware payload", "value": "e8824ce538e5e0aa353c98dc6f787f1e218730f05cf28f177f5f3011382d474d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075883, "uuid": "20800efa-5e9f-4190-b50d-1e5f6542b714", "value": "T1B565E0637711DFA1D314C63009B3C6555AF521A20BE2508AB278C72CBA21A6D6D6FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075883, "uuid": "d4752e82-a028-488f-bc6d-269a03fdc6b5", "value": "24576:t4CTgOHoJHSTQFzx+J8nVZkpDZmFhJeyxwy6vSgE9B/x1UcXer0uhsY0LiGq:t4CqoQFzxLVZknkzCvO91/vY0TLnq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777075883, "uuid": "e2645938-5e62-4ab8-9e6c-012ddcc7a737", "value": 1484261, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075883, "uuid": "f6362016-45f5-4b53-be42-6b1aa60a85c4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "134f7ecb-403d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777076648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777076648, "uuid": "07b10809-53d9-4e98-906d-d6d934cfdf3e", "comment": "Malware payload", "value": "6730bddb01c3c48478ee681c5ffe7b02", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777076648, "uuid": "8d2437e0-b9a3-4558-b14b-e1b53dae3409", "comment": "Malware payload", "value": "6794142adbd95dea9b166c156932f1f3799c0e04f9f6565e9b400e54e0ea1efb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777076648, "uuid": "1be67f46-ea62-4ef8-9745-4021036ce947", "value": "T13365D002FF816FEBC06FCD30492EC35711EDD9825691A62A71FC4B9CBA9D2590BD35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777076648, "uuid": "81560a06-8f60-47f7-b99d-b1f539728faf", "value": "24576:ZYnr5PrLsOf860KhwVfLeyxek+o6TNX3M0MfHpm3EJCkIe/KK/qyTMc2u9W:ZIrLyrVT8k+vNX3MFvc3Hhe/KK/qyjW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777076648, "uuid": "b7dc2ce4-84ab-4a82-ae2f-9be0ff9d4d4e", "value": 1492491, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777076648, "uuid": "50c11984-1c7f-4cf5-8643-136c77b71a4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fce5d58-4048-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777081447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777081447, "uuid": "b5d60e69-7f83-472e-a90a-b28287a4b714", "comment": "Malware payload", "value": "2c03010012a9c1926d95fea2f1b65cf2", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777081447, "uuid": "0151a794-2092-4657-9e22-79da775ffa9d", "comment": "Malware payload", "value": "d1772b9f4dff2b6b88b6edbe19a72761dc454b2596371339650382b6742bbaf3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777081447, "uuid": "777304c8-5d09-4328-99c4-e1c1f64dabe5", "value": "T1D6C42304340741D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777081447, "uuid": "63d03283-083d-4471-878e-660dc7239a0e", "value": "12288:f6wlOMWROC/FTeHo22Qm7NzofOr68mFeA924EwCf:n4MQOC/gHozN7NzomW8TA9g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777081447, "uuid": "2808ba10-0372-4189-86c1-05996d17e934", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777081447, "uuid": "37f7a40f-d00c-468e-acf9-75666bd22649", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ff36fe7-4048-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777081447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777081447, "uuid": "db9f317d-5fe2-4e39-8ae7-59759b97f963", "comment": "Malware payload", "value": "0116738b4c5dcd9ae27dbdea66c1d2aa", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777081447, "uuid": "23862cd8-7bac-483a-9bb9-ba6994fbc540", "comment": "Malware payload", "value": "de2862189e11f3da05dc79ab649a0517a1c4f5f6e76b29433e2f4f4efc659e46", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777081447, "uuid": "343d35e9-9869-434a-896f-338fc7128c56", "value": "T1CBC42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A173C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777081447, "uuid": "7cbc39f4-bac8-434b-90f3-f950bca16e31", "value": "12288:j6wlOMWROC/FTeHo22Qm7NzofOr68mTeA924EwCt:b4MQOC/gHozN7NzomW8NA9S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777081447, "uuid": "ea278415-3745-46c4-934a-78a009ca68dc", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777081447, "uuid": "5f2131ce-bb3c-4798-9b7e-34706e806c76", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4253ef49-4048-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777081451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777081451, "uuid": "475570e7-ec9d-4357-b6d9-497dbc5b564a", "comment": "Malware payload", "value": "1e35a0719dcf60c6167a42e13300cb7e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777081451, "uuid": "463543fa-dd2b-44e3-a4c0-eba9a51c195d", "comment": "Malware payload", "value": "9ab8db363075fc137441e70f2a7da1fab07b3899dfbca59d5b575b64229dc564", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777081451, "uuid": "7d02036b-9f96-4062-84cf-f9c56d3c2aaa", "value": "T13DC42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777081451, "uuid": "b29a3b38-edb7-4781-a02c-2c0094f0173b", "value": "12288:z6wlOMWROC/FTeHo22Qm7NzofOr68mgeA924EwCS:r4MQOC/gHozN7NzomW8mA9t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777081451, "uuid": "15a0ffbf-35e2-45a8-bcb8-309aec09572b", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777081451, "uuid": "3d4a9010-bdd2-4e2f-bb6d-37338107d50b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6bf6c5a-4054-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777086801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777086801, "uuid": "3f698fbc-71bc-4bb2-bbde-918f65d4798f", "comment": "Malware payload", "value": "23153ce512978df723a04e56bb7164f3", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777086801, "uuid": "61f78066-1817-43c9-97d2-3b072a00bb90", "comment": "Malware payload", "value": "00d9b7f4eccc5189383043054431caaf4d0414baac6672a36db5ea3a700611ab", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777086801, "uuid": "611a5dcc-466a-401b-b5a6-1e6cb4e4ed42", "value": "T120F082D6E1311AC28421BF09F76AC9E965A3D7CC11CB5B983EE9787E863C8107910A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777086801, "uuid": "d8dcbbd6-ab36-4d8f-b23f-81023835697f", "value": "12:EsrS2sPspDXsrNIh5hFGjs7cKLKuFGjsWetY:EsrS2sPspbsrNIfhEs7XKBsWWY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777086801, "uuid": "52e2bd5d-219e-4b37-bf5c-9f578e18b787", "value": 502, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777086801, "uuid": "7d5fce4c-e3db-4fd7-b187-35554d104896", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d337e34-4063-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777093120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777093120, "uuid": "ab638b02-2e11-4675-863e-86911a88c8a0", "comment": "Malware payload (Mirai)", "value": "4a06ffe3aa63a576c90a2ba51492a6e9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777093120, "uuid": "8b4b4ba7-ff78-441c-8617-c08277a57cff", "comment": "Malware payload (Mirai)", "value": "6a5f806b5bc05f28b07aae9e88aa3aea06849aca369b0bd82d07152ece4d6ca8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777093120, "uuid": "b1c8b626-53ca-4a08-820b-267588368bfa", "value": "T19A7302D7926A41B4D13327F283F2568871B9FD2B3762AB1301EE50AE7CFB45982305", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777093120, "uuid": "af035c5a-bcfd-4a5e-8cb6-d84c54c2ed0b", "value": "1536:Hcl4if3hAgB83hVQYaJUTp7MLDDqwq07eVD1Xc0imryzm:Hcl4ivupzQ+7KDDqwq0qvXcxHm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777093120, "uuid": "2f55a5b0-9386-4630-a823-efed0b8394d5", "value": 77640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777093120, "uuid": "7bd85a1f-c242-438b-bc4d-f135a762fd95", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c3e4ae4-4065-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777093924, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777093924, "uuid": "9459276e-1708-4b32-bda9-2ba007a82b10", "comment": "Malware payload (Mirai)", "value": "918838fecc7ddb3bc6574f9edf707dd6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777093924, "uuid": "3216424f-aa4b-4182-a349-6041a73a2273", "comment": "Malware payload (Mirai)", "value": "1d06084830135a08fcbae405a4481edff01cc95b971d5ed927f2cbffdc8f8eac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777093924, "uuid": "19199ed2-87b5-4216-a523-15a587644aa9", "value": "T16C53F18751FD8F19C399B27808DD3F6E30355416B0CC9CD38D8C7A632659B6A3F285", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777093924, "uuid": "beadf7e2-806c-4d7c-8041-404d5317d801", "value": "1536:vS3PX/h7QUhqSOZlKdG+guZuXyZFE4y/Z9V/wJmnouy8HyP:aHh7DzOKGMZmwBybmMoutE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777093924, "uuid": "44f63680-a228-483a-8414-a87e2757e789", "value": 62624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777093924, "uuid": "d47b8860-776c-41d7-9d4b-8939aa8b16d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "872d0b14-4066-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777094452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777094452, "uuid": "97b1f0be-e835-4a8b-aee0-569bea266f18", "comment": "Malware payload", "value": "1f5805911eb5681926d81e333cdd39c3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777094452, "uuid": "9951bd09-5991-4023-a99c-8884b92407f8", "comment": "Malware payload", "value": "464d4d460cd9c2d5719480009a967fea85c1ddfe4ad5da2a7942e824b52fad49", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777094452, "uuid": "c9e71683-2b2d-4c89-88ab-4141ac74248f", "value": "T1008308327589582A210B028FD263336C70EFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777094452, "uuid": "c07d57e9-3593-4a6a-951f-4e0938ce04e4", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnVWaQVN/:XEKltp9t2SX/yr2pbVWNVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777094452, "uuid": "9ed6cde9-3041-4fc4-9d89-39fc3baaf52f", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777094452, "uuid": "9775de67-568f-409e-be60-5b6c12bc74b8", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb608c3a-4068-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777095479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777095479, "uuid": "d7d19059-ce6f-4381-84ad-7bc07a0a6326", "comment": "Malware payload (Mirai)", "value": "4e9a2b912a77bc5882317ea8155c68c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777095479, "uuid": "00c86abf-5a44-47c6-aaef-a1e3a8ed17a5", "comment": "Malware payload (Mirai)", "value": "7952507b8a216c9aacb7e0df682693af067b3e215a593003d30d7d64380779c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777095479, "uuid": "4530dc4f-4dbf-4ddc-923a-eed6edd88707", "value": "T10384A653D91688A5F0245CB312273241BC4697BB48E726E3EE6B1962FF3541F41BBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777095479, "uuid": "dad8ccb3-f7ab-4a1a-abe3-b20906026868", "value": "3072:2TgUtjVDyrCgp4GBwFjyN3sENnn8egfXIcVKjbiJLyfQPyXp3yf3D8MrGBRqb:bUtEDEjyN8EG3fXIyLy2yXcfDG/qb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777095479, "uuid": "f1ffa375-d932-4115-b4a5-692014c4ab49", "value": 390048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777095479, "uuid": "b3b47a71-4ced-4033-851c-9924b6df9421", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53ec08d5-4069-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777095654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777095654, "uuid": "3b527a01-c4bd-41f3-906c-2d319032dd3f", "comment": "Malware payload (Mirai)", "value": "7b24890c7f2faf44f9c4ca831415eddf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777095654, "uuid": "490ce818-0961-43d6-8cb7-6222f5ddcf1c", "comment": "Malware payload (Mirai)", "value": "06a8a9834b2569bcb187e1432b9a4a7b9df455ae1058dba02fb445a25d70cbcf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777095654, "uuid": "da1a28c3-aee1-4563-94cb-26d9f2c2982d", "value": "T1688312CDC5DA76A1C6AE09F42F441E389BDAB3A862CD0A1D6B4DD4C5BEF810774480", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777095654, "uuid": "f1a95110-f974-4833-9678-dd9f9a76178c", "value": "1536:gwkAUIuowkUqnHcDJhH/QS6VJTwbO7Jd53+8UkvfwQRfXmT:gwkIuwUqnHc/fQtVJTwi7U89mT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777095654, "uuid": "3c8875db-ca18-4b3e-9532-4ef99f669a66", "value": 81524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777095654, "uuid": "b6e18ba0-1c74-40f4-a568-c7144b3730a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb418d30-4069-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777095855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777095855, "uuid": "6a4a6250-7ae0-4641-968a-831d5ea9219d", "comment": "Malware payload (Mirai)", "value": "bcfb56d03e2723826f2598a923b286f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777095855, "uuid": "6e182191-3735-4090-aac9-05f09e0aabe2", "comment": "Malware payload (Mirai)", "value": "921fc56dfa4efce35f97ce0bf4b58f398d2901371a634087da07c498e2c0f03f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777095855, "uuid": "081fc50a-6c95-45d0-9f9e-48ce5f2f9587", "value": "T19A645513D9164895E5258CF222673385AC4B83BB8CE722E3ED5A49A1FF3145F41BEE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777095855, "uuid": "cbd1d4ab-0c20-4302-9a27-3b5423febdec", "value": "3072:2x9OP4mj0N/XgFAhEs2UTT6LgB+joCOq3esy:2EG1hEiTajoFqY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777095855, "uuid": "ad1aa6c1-826c-4da8-92aa-5f41a343a1c0", "value": 336748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777095855, "uuid": "7802e150-b810-4eaa-8fbf-395d2fdd298d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42c7fba7-406a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777096055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777096055, "uuid": "66fcc91a-5bcf-4a5e-96cc-9ba16ea5741f", "comment": "Malware payload (Mirai)", "value": "1083dbee7e38e3acdbdacfe8c335507c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777096055, "uuid": "7b9ded6d-491c-442c-8257-c683ba7f063e", "comment": "Malware payload (Mirai)", "value": "0af10707a36bec55a495786b7166227f75cb497c90bfb5b35282841b448673ea", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777096055, "uuid": "a155d8df-a919-4bc1-93cd-c60d04ab6943", "value": "T155D4F74B6E328F5DF674C6318AB70925E76833D723E18685D1ACE5205E2068F941FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777096055, "uuid": "ab032e1e-dfd1-4717-a5ab-44e830a71a70", "value": "6144:fOker8JDJdS1hughaAhfZTxNy/yV7BCWGNePSbNaczYEdQMU8h/7bC7hYYCzpKdv:f3ny1hQ7gsYEdhUu7eYfzphyQwqn2d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777096055, "uuid": "8a71d09f-fb4b-4c23-8e7e-0b07a2dabca1", "value": 615468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777096055, "uuid": "74ed45f8-9cd1-4465-9ba9-bef38f4814e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95729177-406b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777096623, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777096623, "uuid": "57e63830-80b2-43f8-aedc-45e1791288e8", "comment": "Malware payload (Mirai)", "value": "cb706c680c0da7eec029a8a83c6151b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777096623, "uuid": "d4e9fe48-6159-4c99-917b-92d7159ab373", "comment": "Malware payload (Mirai)", "value": "6fa6e0b0edc4ddf602176532b4c70894ff84a2fa9587201c967787149cef3da3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777096623, "uuid": "2f2c0252-4418-4415-b5c5-b87bc073098b", "value": "T1DE747713C8254894E1148CF2226773659E4783BB88D72AF3ED5649A1FF2381F61BAF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777096623, "uuid": "9a454092-6ec7-4704-bd62-61fbebced512", "value": "3072:bZk5dxdetsQ+u8F658wjQhsH4WRTS6b+joCdNT:b25kyu8F655LhRbSjoe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777096623, "uuid": "b2413a78-570f-48e4-b7e1-f2dd901f67c2", "value": 358596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777096623, "uuid": "e263d2ab-8038-439f-932d-cf9dc52e099e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae938725-406b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777096665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777096665, "uuid": "4d9ee0eb-d12c-48eb-b0a4-8b704837c706", "comment": "Malware payload (Mirai)", "value": "e27cfaa44a1c6466ac6f47ae2d438bc6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777096665, "uuid": "4409d026-3981-4efc-a76e-6a7121c11606", "comment": "Malware payload (Mirai)", "value": "bcbd3df7b693812fe8cc10642373167a3246fa406d0825ce6cfca1f757f29d21", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777096665, "uuid": "e4d5261b-1d26-40fc-85cc-912f2fac8ee2", "value": "T1428302461B4B56727C80597347A429F16BC7F3D290F82BE235DD4A17A4AB6973EB03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777096665, "uuid": "7ca96f59-e53f-4d65-b0e6-36b2c3fbc8bf", "value": "1536:fet7qvHhrxVzXYrgEiNvKEJmTdnp7+2bvefYu2ZJ6Img7EsviUy5g89DR5C:Gt7qvpXzXYrg9vKEMBwgeGwIZ7Esv3hZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777096665, "uuid": "aa1a6faa-3084-4bf6-9656-03126534de38", "value": 85736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777096665, "uuid": "a4b4840a-08c9-42b5-bd71-197dd584df0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5178976-406c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777097106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777097106, "uuid": "5df21b7c-852e-4937-b2ee-9b13ffff91cf", "comment": "Malware payload (Mirai)", "value": "046d680cc89d43e750313fa6e8efc8ec", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777097106, "uuid": "a42d0821-8f4e-486b-a516-6df29ebcaeaf", "comment": "Malware payload (Mirai)", "value": "41d63ba68c9afacb761887340de39b39ca66df013ec0eb6ed279279ca901958c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097106, "uuid": "cecb1db0-e702-49e0-86d2-c932327cf5af", "value": "T10DB45C03EE94947AC0C6C2768FEF8227E774F4AE2338752B1756AF516D05E90DB0A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097106, "uuid": "e33c1017-c932-400a-b93b-7a77abfc1eb4", "value": "6144:2FiC9DVwXFjnmHFuMo6FShjKxk7KYGt41nwohRuTdINE7sl:Y7krjOwwohRuTduEg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777097106, "uuid": "70294017-8ee0-44a3-87a8-723c0a51d58d", "value": 513064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097106, "uuid": "458b866e-fa93-4c5d-afb1-019fb24ae3b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18dd054b-406d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777097273, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777097273, "uuid": "6d46ed26-b6e2-4b22-ae5f-fed0bbca0778", "comment": "Malware payload (Mirai)", "value": "a7f1ee8a930e289ff945de8fe6999214", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777097273, "uuid": "f8d928c7-4970-4f34-bc4a-cd0e567e95c9", "comment": "Malware payload (Mirai)", "value": "e4e1beaf3033d7c1a39ff638f1b4e2ab7adf9721b34c28c52a7984112777599f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097273, "uuid": "8aac476f-e337-4cf9-9735-2717386f5fb2", "value": "T15CC0C0C4846618460452E5C0F451413C303138D134FE3A0CCE81CCF0C04470DF200F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097273, "uuid": "6d1d5c32-aea3-42b7-863c-f7dfdddff964", "value": "3:TKWRt9jvGBwCjOolTLTeUWckc1II3v0RQQrFLTTLTeUWckc1II33B+HHGzFz:BRzqlfWeh/52FLTfWehHkmpz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777097273, "uuid": "5df1b8de-069c-4a11-9b41-4b9f58de9125", "value": 181, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097273, "uuid": "ac64e240-1e97-4bef-b250-389e3989e21b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2986fd4c-406e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777097731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777097731, "uuid": "54d62465-7c3a-44de-b26c-3fe108d886b5", "comment": "Malware payload (Mirai)", "value": "1b5c4f00b60fee7bf341001853aafe3a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777097731, "uuid": "1de4a64d-fdf5-401e-a1c2-65d8b201aaba", "comment": "Malware payload (Mirai)", "value": "0210226f81dd3a82cadf856dd996f0b5fcb210cb2630d8d1eb1a50abc7c7a95e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097731, "uuid": "7baddffb-e010-4c95-abe3-8dd97677e379", "value": "T121831273EE1A69D8C6650C34E47AC2C739F7CAF660D53820BA440AA53C65D2D6C9E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097731, "uuid": "2974feab-db4f-42b3-b090-80880e9f9e2b", "value": "1536:FiP8fq2XZHuSALCpVmkInClz4fBJFjUrAFYMezOY3u+ZA7N:c8XZHuzAkkTEJkAFYdzF3u+S7N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777097731, "uuid": "0ec73799-e3b6-4bd1-be75-695865179ccb", "value": 84180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097731, "uuid": "8ddefb2b-c8ec-4078-a2b5-2eba8645706c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5da0f242-406e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777097818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777097818, "uuid": "a489b2d3-64e2-43c0-8610-4fc144e9734a", "comment": "Malware payload (Mirai)", "value": "bfb1181ecc782b7cd295569bd4092745", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777097818, "uuid": "0e703308-fb05-4d4e-a095-0be2a1510443", "comment": "Malware payload (Mirai)", "value": "d3c084cba6219a37f7333743597327c160fa43bc45ac65616aaa784ac5174922", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097818, "uuid": "3330fa86-3598-4ee5-8446-614a80dbb24a", "value": "T11F730261CB142DDBD2BFA9F10A84D7C687D2498F937C5DF294DA7503BB0BA4607600", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097818, "uuid": "b0b3b15f-6a05-4ff7-9f1a-12855d9ebd0b", "value": "1536:zoVzyx1jSexGWHo1wvSgP15XZCDoggdf/cqq0xW/XUlV4FoJ4u+qgw0z7:E2btBuw6gnXZYordf/CDXk6a4u+qgwY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777097818, "uuid": "5554eb89-e4a4-41f0-8e51-1e776a792406", "value": 74068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097818, "uuid": "fb39ebd4-5fe2-4083-85c1-b8d640eb6e1c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9d84914-406f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777098429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098429, "uuid": "61d192e6-aaa9-49bc-a338-14d6a6b4d22c", "comment": "Malware payload (Mirai)", "value": "69725f6dfbca73df8709610c6aefcf16", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098429, "uuid": "f66c73e3-0ccd-4ceb-817a-f82478e163f9", "comment": "Malware payload (Mirai)", "value": "ffaa38e9df2a763b35f92c563f71ae029bc6d8e48e6415150e31681af6affaf8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098429, "uuid": "afdd9daa-7e74-43f1-b388-6aa7908b9dac", "value": "T1C5A43B65BC419B51D6D02ABEFF6E828933132BB8F3DE7122DD055B3167CB84A0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098429, "uuid": "226f7451-3dd7-48f4-871d-140ebbf92c1b", "value": "12288:5zs+/fifEzAPPEs9VHT5dlo5hUPNTzsKptdP9ZCFRtaD1b5e9Pf0nsL+a8oN0TT5:zuyS3lo0EJfeMk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777098429, "uuid": "a1878e6e-26ad-4ef5-9a76-31506004e16b", "value": 457824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098429, "uuid": "ab9ba00e-5d73-4e06-b932-a027fb4744d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e11b4289-406f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777098468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098468, "uuid": "653bb05f-4bab-4194-af2f-e44c9c04a554", "comment": "Malware payload (Mirai)", "value": "0860724d4e40c437a3faea776d2cad29", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098468, "uuid": "82ef311e-2891-4ae9-a478-39ca15da6472", "comment": "Malware payload (Mirai)", "value": "92a3f3f5933f84480c2e2e8acba9d44f2d559b953f412ad46f5c921e3067ad43", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098468, "uuid": "f47d0df7-0ba5-43c8-b446-7ab03b0b25f2", "value": "T1C313E15D23A55D34A1B26D389466CF0B9B2D6F38F5B63D8B1E205314C84AE1A37E72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098468, "uuid": "5915c921-ad84-418a-b509-e0b22303f184", "value": "768:rpZqOgAG3083+jT3x1vMgWy+0titQSwzDemQu7P5AykU+2m+djV0s3UoDe:nqfAcbk3v9NRk29zyK7eykX2TdjVRDe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777098468, "uuid": "7b95737c-7227-4119-8f91-4a8ab07e21f9", "value": 43456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098468, "uuid": "1971364a-3c63-49f8-810c-569eaa7b9696", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c818e28-4070-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777098622, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098622, "uuid": "abeab840-57ea-41b4-b756-98602a335758", "comment": "Malware payload (Mirai)", "value": "b48ffaae6f0e9ecd84be83adea17c576", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098622, "uuid": "1a06fb30-3cf7-4b4b-90e2-1a94a3d2333c", "comment": "Malware payload (Mirai)", "value": "ff0df55891a794ea9dae7bdd1ce6933d62515992159d00f5d98df07f10a4fa96", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098622, "uuid": "1395e6ec-0424-4656-8ed3-44856b680d8e", "value": "T168A43A51BD419B26C7D06ABBFFAD828C331327B8D2DE7112DD064B3136DB95A0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098622, "uuid": "a4e1bc8d-8f40-4d48-9cc4-06bfd251c84f", "value": "12288:2eROXoDy8MmKHKdXQT3vo8nmsUho8R9RZmZop37zmcf/WzCNt1cc7WinzsMnasEp:5FrkC+GIMT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777098622, "uuid": "3de2e082-ac72-4ed1-afab-113e91c39540", "value": 467220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098622, "uuid": "0cde1335-e38d-4a2b-92e4-d3b082c4f728", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83ce1d56-4070-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777098741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098741, "uuid": "40699911-cc6f-40cf-b3a1-82f69e4173d3", "comment": "Malware payload (Mirai)", "value": "5eb19f83887057cf20280a96bc345c08", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098741, "uuid": "cbbbc27a-70e2-46fb-9d79-4c3db558d26d", "comment": "Malware payload (Mirai)", "value": "260b26352a27cfb8bfe256593e2c789577d51f2c41ce1eef7c5d8d92229a8491", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098741, "uuid": "9f2f40cb-2182-4815-b4e5-c14e772a4360", "value": "T1367312B427895CE1F56049B2FD5A3FF85DC21E4396062C866A5CF52B5CCC223BC479", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098741, "uuid": "71419bfe-dbbc-4f45-bd9d-ed1b4ec0238d", "value": "1536:tHByWmJ+snrHjYP+d164fW3kkgi5RbkW8lmgCfiIDu6dJy759w/mtEVJu/:tUjrFdMmW3BN5ZV8lYaISmJE5eutEVQ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777098741, "uuid": "a0166d8a-81a6-4305-86d7-8511423bc559", "value": 79512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098741, "uuid": "98cbb7d8-8b31-4701-bed8-43dbe68dd1ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb30c6ee-4070-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777098861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098861, "uuid": "71ea2cae-8426-4543-a539-114868e2f58d", "comment": "Malware payload (Mirai)", "value": "c1bec8990e0831d384b5cc1b2b15abf2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098861, "uuid": "efb6108c-65cf-46bb-894f-a7f42c113a0e", "comment": "Malware payload (Mirai)", "value": "41e26a1db2f68a2f9215ff63aa60974415e338e121d98c18bc80ceea9116310c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098861, "uuid": "9ff2e360-f7b6-4ac8-9d8d-4f596eed0a3d", "value": "T1B0D41B0AAF541EFBD82FCD3706A91A1634CC685372963B363535D914BE1B90B89E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098861, "uuid": "535b322a-6b95-4495-9fc3-5abe2e08b2d3", "value": "6144:Zxw6gaUzdOdLnt1omNkOJI72NSFp88K4tV/PClyPTy0tR6Jzgzf5o9PcMjD1:ZxZn11kOO6NSF84tNPCUPOi6Jz2MX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777098861, "uuid": "2877c170-003c-4090-8934-d5ab26d2de67", "value": 648556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098861, "uuid": "09f8b8df-7adf-4b69-913b-be328dda6a04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e80bf11-4071-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777099001, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777099001, "uuid": "aebcb009-1abf-47d1-8904-c7aadc1d1eac", "comment": "Malware payload (Mirai)", "value": "eaa8ef5606337c861f5fdabdfe0c1a15", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777099001, "uuid": "705dee48-ac1d-439e-9852-925f48a3b6e8", "comment": "Malware payload (Mirai)", "value": "455fd8345586b8ef5d6bbdd9e180d91fe886ebc4cee6f59cee4eee92dfee1f83", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777099001, "uuid": "6fb5f0a0-80bf-4614-bb45-cb341baa19bc", "value": "T17A730229A22F4D31EE312F3FABBD8364FFA717B54090555126268F77D7E6001ABB80", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777099001, "uuid": "00b8bf73-7b4f-4b12-b16d-6585d0515c69", "value": "1536:rhsyhtrEuaiHKuGIS9SwsF341vQ4wvmD+hCfR8AipS/o7gDH+2RHHZKxAwKh6AD2:TjrELMGIS9SwOUvQ4imDrrcvsr+2NQnN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777099001, "uuid": "3ceb23ab-ffa5-4da5-9c5e-15c9927c9166", "value": 79424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777099001, "uuid": "9109e3c8-a130-4221-8d32-ed5f1d6dbfa1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a404ebe0-4089-11f1-bc00-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1777109533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109533, "uuid": "09cc6b41-afc9-49b6-9a94-3af972eb05b3", "comment": "Malware payload (CoinMiner)", "value": "dfcc70c1e7d9a622a73d62f525fdb82d", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109533, "uuid": "4a9d786c-e447-4374-8788-a37e24873344", "comment": "Malware payload (CoinMiner)", "value": "e0a28938bba298c91330a85dd51ed121c1d830f0a8f06304669e0af9ae6cd1c2", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777109533, "uuid": "f646288f-6650-4986-93d1-ac1555df1f9d", "value": "T122963318CD124E87DCBB69BB4AA240293F548934D3E29DF6162DD3C93EF2CD099B17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777109533, "uuid": "d984d406-a76a-471d-90fa-c1561b5fba94", "value": "196608:zjoaV7rLmDXzRizBuxl2rCh1WYguJxxzyHqiLD3lD9XzdoN4+al7zDnx:zjoMmLzR37ZtJxcHXJkN4lNvx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777109533, "uuid": "6945be13-91b4-4842-ab4e-5ba115b76640", "value": 8693620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777109533, "uuid": "e338a891-76e8-4c25-97ab-92456b904978", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5cd5732-4089-11f1-bc00-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1777109536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109536, "uuid": "b19953f1-5956-487e-b4b1-76fc13dd7221", "comment": "Malware payload (CoinMiner)", "value": "63ea169119cb38247c71ebbf84d8fd37", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109536, "uuid": "e6eb8aab-11cd-4abc-a492-6bf2d2e38ff5", "comment": "Malware payload (CoinMiner)", "value": "ed33fce6b1ea7732567eb674aaff983bdc2eac7da8f541b81963d37f0559e36c", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777109536, "uuid": "d1a7945a-74f4-4ace-90d5-460c489942cc", "value": "T11FA633769BD0AF3F6F3400FFD46773D4A9819B9001786F6750AD284B8A05A78A9025", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777109536, "uuid": "d33d4ad3-4ca4-416a-b84d-e788f0fe27b3", "value": "196608:rOyotIgn/V/W6LCbpZVhvV1CICT36GjeOCJTVESymQxC3jE5Fve:rHg/tW7VhvyVeOATVE/m33mFm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777109536, "uuid": "7b5d727f-7e56-4747-b0f1-81b8a4b6b297", "value": 9663988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777109536, "uuid": "9db7d30b-3bfb-41b9-a42b-7461ac342766", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df7d6dec-4094-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777114357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777114357, "uuid": "9a1e467a-20a4-45ab-8767-73d0ea61fc23", "comment": "Malware payload", "value": "2eff3685b268b4eef1a2a16c7210e7a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777114357, "uuid": "65e42938-7ef5-49bd-810a-073de2297456", "comment": "Malware payload", "value": "7bf32620992726f5405d8692c66fa3d909f6513f8fb2784a14f8399f6b7e5530", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777114357, "uuid": "158145a8-3e08-4e0f-ba1f-737c673c6d81", "value": "T190350126FA156F1BC8968278C59BC6382377F0858782B303B644E2397C5736D8F1E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777114357, "uuid": "246f437d-e16b-42e4-acf6-7b0b73d82cdb", "value": "24576:l0tqcI4qN/1sfElJokJ56nrGn+lANn7vP6e9GSbQ0XTjEdLk4cQUCkTasm:aiN9kiUyn+veYSbsDUCktm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777114357, "uuid": "2619f9b7-28b9-4a7b-84d6-d4ef812fe8ef", "value": 1126900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777114357, "uuid": "07a640cf-a6c5-402f-8b74-0e5e35a37614", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da7729f1-4095-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777114778, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777114778, "uuid": "966ab7f5-6e37-4200-ba65-c542d9c8ed21", "comment": "Malware payload (Mirai)", "value": "2e9f750604295f60c5572805881bd3a6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777114778, "uuid": "d7a290fa-5749-449b-a73a-da4c540dd295", "comment": "Malware payload (Mirai)", "value": "07e74cece7a0a4ab592cfc95620db1bde0ed7a3c2bcb21fd560335d0911ef9c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777114778, "uuid": "dd98060c-4c2e-4dfe-b18a-2081607059dc", "value": "T13354C50A7B619FB7C46FCD3305F98B0128CCB45335652B7A3670EA5CB62A58B46D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777114778, "uuid": "95a0169a-0db9-49b7-88e3-b734bd491ed7", "value": "3072:N7MDoQ/iBetq072EcbZKwkoIpMG5IqyRShP/UjPpnGqbV:UoQ/igtq0KTtd3IpGzSh3Ujv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777114778, "uuid": "eac96177-99fc-4331-81ea-10783cff065c", "value": 305576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777114778, "uuid": "c656e7b2-f6be-404d-b67d-c0b378c8aca2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a46c69c1-4096-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777115117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777115117, "uuid": "a2ebc53f-a556-4db5-845f-5f94e1a52847", "comment": "Malware payload", "value": "c39c702faf2bebdb7f8d79913e5aa4ec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777115117, "uuid": "72b694f1-4324-403a-b1cf-faab933e67ac", "comment": "Malware payload", "value": "a2f88acc3bd4d3d6b90de9736b89795e238e577f48f2d36fe86852f0ce6b14ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777115117, "uuid": "3fa34743-11e5-4bff-bc01-eada1db2dfde", "value": "T10B65E0633711DFA1D314C67009B3C7555AF524A20BE2548AB278C7287A11A2EAE5FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777115117, "uuid": "c0478731-ee5e-4358-a169-03c85fb2ae69", "value": "24576:t4CTgOHoJHSTQFzx+J8nVZkpDZmFhJeyxBimoZnytCu964HP8/OX91DXk3WooQZO:t4CqoQFzxLVZknkzboZnytCi+OXbD0Xq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777115117, "uuid": "7a7323d7-4b36-4fb2-95fc-864fe3461394", "value": 1488674, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777115117, "uuid": "5aa59379-b8cd-46e3-8370-03ee6a24665a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d357555-4099-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777116286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777116286, "uuid": "ce1b39a2-927c-493a-b728-28b86e54f566", "comment": "Malware payload (Mirai)", "value": "9b2fb13e76dbc3afbe7d869e220c30ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777116286, "uuid": "41859a81-d05d-4677-9647-9930745bd074", "comment": "Malware payload (Mirai)", "value": "c3f9eca562c130fa7aec5210e5d0583ff383580c3f6fdb6e3cee233f79ee066f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116286, "uuid": "7fd1d546-14b4-4052-9446-b03d77809ba5", "value": "T13C85E189F793D4E2F25341F5024FC7E20470A1266057FAF2EB44AA797876B922F163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116286, "uuid": "fed0762b-2691-441a-ad1d-367ba4f4dc54", "value": "49152:FZSKQphYuhMEC9m056KyBSpFnEMckJqBmHF:elphYuh49mMpFEMu0F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777116286, "uuid": "71fc77f7-31d9-4dbf-a762-32b208115011", "value": 1718172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116286, "uuid": "a72d7037-14f0-4d48-b79d-1943ce418ff2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db35d0ec-4099-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777116497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777116497, "uuid": "0f60c090-7492-4f88-b316-4048dfc13b2f", "comment": "Malware payload", "value": "25f2b678f5543b59570b97ac8cdaa726", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777116497, "uuid": "6e0e35f5-daf3-48ef-bcb8-be1a4192ce1d", "comment": "Malware payload", "value": "d8fc7d35381d321ec59794e28fc819a53baf3236708c9b074ed23d7ae39dbc00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116497, "uuid": "758016e7-ce42-48ce-bd1b-7231b8989642", "value": "T1E465D002FF805FEBC06FCD30892EC35711E9E8825591A62A71FC4B9DBA5D35A0BD75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116497, "uuid": "c5afcf8e-38f8-4058-ad88-53254cc97770", "value": "24576:ZYnr5PrLsOf860KhwVfLeyxzZChj4C4LYzRtkvnIouh0ocTVbGb+4o:ZIrLyrVTx0Jn4ERtYnIoU0vTn4o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777116497, "uuid": "3a74bce1-ef75-49f4-b82b-b100507d1203", "value": 1492724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116497, "uuid": "0cfb3dfc-9f56-4d3a-bc87-362d4dcb52bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a3664cd-409a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777116791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777116791, "uuid": "33b675c0-b528-4967-aaed-b703400618ca", "comment": "Malware payload (Mirai)", "value": "be2978d24c94711c8df647ffdf5b02a4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777116791, "uuid": "e5ebc862-bc0a-4311-acdf-f2997172efa5", "comment": "Malware payload (Mirai)", "value": "1c99e03a5e2cbd6a374e6b8f480cc1a3cce48e6c15044b78223dfe667ad1030e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116791, "uuid": "84d0db7c-6306-481c-98b0-253cfe5d2be6", "value": "T195C44906F8808F62C5D125B6F75F8268731747B9D3EB62069A189B343BD782F4F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116791, "uuid": "60e5e391-78fa-4cf7-9c4f-127ac1069bd8", "value": "12288:jz1JLpK0HtruGG7i+xU9xgzLVe8XLMg+t8prPEWrZreKW5rarl:31NpKa1Ge+K9qzLAAkKUrar", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777116791, "uuid": "bb2b33f8-3037-4dd4-9a65-94a40a555f3a", "value": 591140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116791, "uuid": "9d8708f9-cd8a-464a-a78a-f0889199df2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75028d65-409b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777117185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117185, "uuid": "3baad99e-9e8f-4234-a4c0-b01de03dc992", "comment": "Malware payload (Mirai)", "value": "821bd4213e8f2b45b98da809ead42267", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117185, "uuid": "59dd4ebc-8d6a-4147-9d05-7e5317a41086", "comment": "Malware payload (Mirai)", "value": "8f090222817a44fa0e854382a358b5d44c75b215f5c652efa84d9e72e89d87fa", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117185, "uuid": "909fb2a5-e2a5-4693-8102-c69b9973f697", "value": "T13655CE06F8808F62C5D125B6F66F836873174779D7EB62069A189B343BD792F0F3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117185, "uuid": "faa48d14-9212-403d-b198-36b97ab0c824", "value": "24576:6z/qLvfxB+6qHxWiOeiJnaGYTAlTMWVoFaCHRUxvRU8ABEY0X+PsmI7Cjtj:6kfxB+bxWitGYGhVoHYxbX+Psh7Cjp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777117185, "uuid": "aa42f07f-b152-42ab-9fb4-89455c83a290", "value": 1303127, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117185, "uuid": "dbdf01b5-f3cb-4fb8-ae36-eda3e594708a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96eef3f1-409c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777117671, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117671, "uuid": "e77d9832-143a-4e9a-9992-115c8ef167da", "comment": "Malware payload", "value": "1006eeca695b16932158566b72a882f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117671, "uuid": "e4209c21-55b2-4697-9e55-88baf950ea42", "comment": "Malware payload", "value": "560ee8338b00324ea38f6558ebc920733b7f65d0a9e75e2a838d12cbe7e07d1a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117671, "uuid": "c133deda-bc3a-4e76-b6f7-41e555b76f7d", "value": "T1E765DF93A7258956C0706E3BE0A7EFB183677E3119D86A0F9D48F77648B33048F15D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117671, "uuid": "ee82c53e-75a5-4c17-acad-04cbec1a0903", "value": "24576:fBAXobSBtriTNJbWk71XZJEK7p3IXirNBHuWS9b5atEl0BKC2ig:K2ik7egFBJdFcws4l2L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777117671, "uuid": "018e9d14-1a6e-43ad-ac8c-81213745bb26", "value": 1490123, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117671, "uuid": "3d6ebe0b-6873-4aea-8e4f-ea386cf8f33a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a50e8cb8-409c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777117695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117695, "uuid": "783b4762-93c6-4595-8e54-47da5862862b", "comment": "Malware payload", "value": "9001b2c0e0c64b04247808a171ade866", "object_relation": "md5", "Tag": [ { "name": "DeepLoad", "colour": "#78e8ae", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117695, "uuid": "2f71efcc-4005-4e5a-8a16-742c8634a458", "comment": "Malware payload", "value": "da5b03d80048852b51cd62eb61387c3247896b2e331eabeffa59f9f63820ab62", "object_relation": "sha256", "Tag": [ { "name": "DeepLoad", "colour": "#78e8ae", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117695, "uuid": "c85a9c35-ec98-4565-8156-c9c6c92acae3", "value": "T17A968D07EC9155A5C0AAE6318A729293BA717C485B3123D73F90F7392F73BD06AB87", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117695, "uuid": "9e1bb3e3-bdaa-4402-a881-af7912734e7a", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117695, "uuid": "24834a9f-1a82-4ab6-9325-b8d1280b3ea6", "value": "98304:3UFtBMHqONe814wktNji9Fwur+yjNX0JYkR3ud5stHnE:3UFzMKONe849NjuFRr1jNkSIeoE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777117695, "uuid": "02fe9d11-c3e1-47d6-b7c9-f749b91d97d3", "value": 8744960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117695, "uuid": "b49171db-7acf-462f-aca4-74595bafa388", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf189f8a-409c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777117765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117765, "uuid": "54920015-cbf9-43a9-8289-08f743eecbf1", "comment": "Malware payload", "value": "2e3685d6016b2bc7b245e44be236f2b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117765, "uuid": "2d0a4a8d-5b66-4d1a-b56e-dfeb942e5c1c", "comment": "Malware payload", "value": "53e8f182bf378118b327b901130a3ff9c9d7fa560592aef7e9fa666c4c57b279", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117765, "uuid": "b71cbcef-db03-45f4-ae5b-0c4b5501944f", "value": "T16E95E15AB2F374FDC067C030835BDBA26936F46541222D7B21C4D6352E96EB01B2AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117765, "uuid": "31c4ccb4-cff4-4417-ba44-d3fe16221891", "value": "49152:A19DV6Ab6AGREj95/yQlMwji/zocyV4yvX9:K9DV+RAnTj464yv9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777117765, "uuid": "236a229d-1a7f-4626-81fb-cd693640582e", "value": 2030973, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117765, "uuid": "f88ebd26-c9de-4858-8156-3d3f037de3f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76653aff-409e-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777118476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777118476, "uuid": "8aa7763c-3dd1-4103-af7c-2c972300f53f", "comment": "Malware payload (Mirai)", "value": "4fb22948b2c2753e9fb133cbf5c13515", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777118476, "uuid": "f04ae115-66cc-4b2a-902e-2d07267142e6", "comment": "Malware payload (Mirai)", "value": "83d48118c00aad4d9115e5db627cfae457a622a40dcafa4e923dd61fef88d04f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118476, "uuid": "270fee12-75ed-4254-8a28-4acd23eaa4f9", "value": "T19E65E05BFEAE3C07C2D6E23D9B8AC3B1532BB191D32352527581432CD9C6AE8CFA15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118476, "uuid": "881aa293-bc0b-4705-8f15-f48015ade23b", "value": "24576:dJ9uTMBCNwyCeThYVf+QcNeeAq37FXnW1H3Bth5K95qgOAQHbjEKn:tr+of+Z1xXWRr7iOdPES", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777118476, "uuid": "69967acc-6d3f-46b4-b29f-4e6969a91106", "value": 1425194, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118476, "uuid": "f9c2f8f8-417c-47e3-873d-6b1ea7bb1b9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e551dd0d-409e-11f1-bc00-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1777118662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777118662, "uuid": "d055ff85-4c4f-480a-a199-206695e78d7d", "comment": "Malware payload (RustyStealer)", "value": "b60e4777759623b9fb92b02e234eea49", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777118662, "uuid": "961891f7-0b10-47f5-8190-1a705e004c8b", "comment": "Malware payload (RustyStealer)", "value": "c93b4da592441062b80ad9036f1bafa5ac77714f66c3eb2185081c04c29ff0e9", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118662, "uuid": "1b3a765a-6aa7-4270-abbf-61b282143a09", "value": "T1E4969D03E39181ECC46AC1748367AB33EA73F8894634B2AB5BD85B212F66F505F0D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118662, "uuid": "5d808372-e6c0-4a62-b270-35208ff27cdb", "value": "be9db20a0a086f6fcf0e952dc3183a39", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118662, "uuid": "9adae37f-58bc-4450-a274-8ba7ea49fdae", "value": "98304:uw+jWkfRo9uhUUOI0qBainVTwdNyoPWswU4Bb/+s:9mXCqryFoU45", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777118662, "uuid": "d67d5d1c-3611-4ac6-a6b8-407407f6c559", "value": 8952832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118662, "uuid": "6fe85e98-b716-496f-96e8-505d7c0e6c91", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f16a1d9c-409e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777118682, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777118682, "uuid": "336804d7-fe0f-4325-be72-e2b5064c2ef8", "comment": "Malware payload", "value": "defe0b82422c91b3fe25bbd5ab928c3c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777118682, "uuid": "68797c01-5b72-4d0c-9528-0b19b6f43199", "comment": "Malware payload", "value": "98c7b217a06cab781f7727de1ab4c03057cf1a0cf24add3b65d10ef179f43401", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118682, "uuid": "90382d65-9814-4194-896a-7e7aa226db25", "value": "T17393E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA623895F9D903AB32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118682, "uuid": "eb2aa60b-dd11-4c0d-985b-d3a0b711c16f", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXQIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777118682, "uuid": "9be0acf8-ad77-4ad3-9fd7-030acd5a40b3", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118682, "uuid": "0225d4ed-a11b-41d8-bad8-e62ac79182a0", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ca9be5c-40a0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777119265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777119265, "uuid": "4af62869-2c8c-4f5c-ab99-776b916cfcb3", "comment": "Malware payload", "value": "eb17f4bbe4c11ea2f1e7cd5a459ddf19", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777119265, "uuid": "14bf59c6-4194-474d-b8b1-883ac9825c4c", "comment": "Malware payload", "value": "6fd05650483548823fecfb864518d39cc3bdd437d4f98f7e0c0fbbfd6117a7cc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119265, "uuid": "1e6e5a9a-0831-43d9-9987-fd0c614854db", "value": "T11385D043FB1C4422C8571EF0197F43D5F7617A5345F5A22A270E6B672222E3ADAC73", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119265, "uuid": "683dde52-6adf-447e-ae15-ff0ff84b06b1", "value": "24576:xHUcf3MuHMwp1W6mYSWgZXpAvMyqqPVmdF1gOdCmYiz5Ekp59SdEM09QD1cxS7:xHUcf3MuHMwpsdZXp5T1hdEiC09Y1L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777119265, "uuid": "b6b6cffe-c1b9-4599-b043-45f0efa8466a", "value": 1708930, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119265, "uuid": "ec726b35-6f6c-4197-8149-152db79eeab9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9635af1-40a0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777119527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777119527, "uuid": "5e6ba9c6-565a-4b9c-b15e-d2e8211cad1f", "comment": "Malware payload", "value": "665d381b2f44a1fcafab27003980ff3d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777119527, "uuid": "d6ae93ba-7f41-46e2-84ed-86ba9b6a3b10", "comment": "Malware payload", "value": "77ba2321d72d3be96b2d49651939c8f781cd3d75d97eae94bda7b024b4000486", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119527, "uuid": "25c59386-a5d2-4471-9675-5fa17ad89c36", "value": "T158E46B627711DFB1D354C67009F3C75146E521A20AE251CAB27CC7287A52A2E7E2FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119527, "uuid": "aa529ac9-78d4-4c6e-a0b3-99f658b0748e", "value": "12288:gkzt4D63sL86M5N6hjVLYaNa7CgdP2Ds0e/9IzWWhWWWJWWWRE8ptYLMZNI3aPjw:Lx4D63w8/5IhZLYaNMdPos0e/yWWhWWA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777119527, "uuid": "9048a71d-5796-472b-ac83-a2966d91d939", "value": 682956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119527, "uuid": "e0219aac-331b-4e56-b206-bb1b4129b89e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12fc4e44-40a1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777119597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777119597, "uuid": "92c35539-e14d-4336-92f9-c92561c33e53", "comment": "Malware payload", "value": "751521cb9f8c5dd9fb67dbb1921adbd5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777119597, "uuid": "d637fc68-a595-4013-bfdf-2082e79b078d", "comment": "Malware payload", "value": "9896eca467401ba28c8c41d185300ff29052f26f1a8526353937383a41d5208a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119597, "uuid": "a0923b75-39dc-45d8-980b-0e1fc1de612d", "value": "T17375E19173469663CEA88B7106E2C370E7F5352252F3865EE31623280F725AD6D1ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119597, "uuid": "847471c1-4f19-4d24-8be9-4e3fbf68f7be", "value": "24576:TD1HGqhZd4FILjPYubEn206uIOtD4DuJ+6dpEYWe1agdynaIHYZzXpEdIcn:PZYILjP/Eh6JqJ+QfKnaVZTpxK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777119597, "uuid": "3d3a1cf0-c8c2-4a94-8edd-bd3a4f1ad775", "value": 1641095, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119597, "uuid": "9ddf9204-0fcb-4366-b800-1fd5a71d32a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "695cb337-40a1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777119742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777119742, "uuid": "6b564c31-b835-4096-a972-c0bb49642c5e", "comment": "Malware payload", "value": "f1da09e0d338b29a62d1bcc8ec30e9a1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777119742, "uuid": "083408da-9ee4-4b59-9e2c-8e018af0cda6", "comment": "Malware payload", "value": "c8b6a2082b3690785c8a092a957adb877aa1e7df6d186da01115f8977a680b9a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119742, "uuid": "2058a20e-4a82-4aba-b9dd-1659204f775f", "value": "T17775D193AB091F97D0EF8F34841A829A03686D939911C76EB6DC3F9D6F3E3994BC14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119742, "uuid": "52530552-c7e4-4b49-a80c-fc2a526674a1", "value": "49152:SPS3333333333333ZI3a33333zqH3iFFSL68EVod8LhxZfym:S63333333333333ZI3a33333U+soid87", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777119742, "uuid": "eaa86299-1130-4caa-9aa2-e1724328b496", "value": 1641058, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119742, "uuid": "74f53c48-e7e1-4ac4-a6a8-2b434677c8fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a9ad7ad-40a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777120066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120066, "uuid": "0b254b4b-2ad0-41fd-bac2-35cb0a60493f", "comment": "Malware payload", "value": "71cfa4d7922525ef0849f925d8041832", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120066, "uuid": "a6498397-a1ba-4a7f-9782-da83912cbff8", "comment": "Malware payload", "value": "c89c5bd7eb75498e2e76d31c2b4a33d053224cfac1add84a72fef6b707b2686e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120066, "uuid": "23495cdf-4cad-4158-8d7b-b3efd7d24d59", "value": "T193931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120066, "uuid": "fc9bf416-cbe1-4b70-965d-a90daeecb8b4", "value": "1536:nByp1tF/uwMmAIa14oX/KIlepeV7tb73WdxCrCitkb5fv2v05xWjrIKB/s1kKMrW:n8JIe0GitkbFv2v05xWjrN/s1kzrty7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777120066, "uuid": "17dc0aa4-0e62-40e7-b02c-0d085ddea9c1", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120066, "uuid": "fc088100-602c-47dd-b898-c12a3ff62a49", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5bbea408-40a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777120149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120149, "uuid": "e0cb3283-5991-4f69-8fd1-d74ec97d7dfe", "comment": "Malware payload", "value": "1d243708afe031de0bf89b1601ea83b8", "object_relation": "md5", "Tag": [ { "name": "pw-9912", "colour": "#fcd0f6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120149, "uuid": "c4e9d0a6-13ed-477d-a612-5738e020d7d0", "comment": "Malware payload", "value": "d485c527f34607cb27b0abf569eabeecc998f1b6225305488a69e64559d11046", "object_relation": "sha256", "Tag": [ { "name": "pw-9912", "colour": "#fcd0f6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120149, "uuid": "06edb78b-493e-4148-a1fd-d7fed8c8ec05", "value": "T1EDE6333D20C732DA60161F65A4BBF0B396F99A05FE1B07EF4E31769B50974320CA99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120149, "uuid": "02ade625-d4a6-4aa9-8cc2-55e7dcaf56cd", "value": "393216:7exODVZz/fJr3ATfWCvG8YWv9ZG7ugXm3U/0ez1QF:7BTLJrQThvzUfN05F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777120149, "uuid": "384a0cd0-33eb-48d8-ac3d-cd15b007063e", "value": 15028702, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120149, "uuid": "547ec907-d854-4306-8579-330f2d50ff89", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8876df4a-40a2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777120224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120224, "uuid": "76ef2f42-3222-4c37-937a-bb9e6e081b7d", "comment": "Malware payload", "value": "cdba77ee3bcbe00b2a1b75409834252b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120224, "uuid": "dfc40152-771e-41e0-882c-69092a8ccfb1", "comment": "Malware payload", "value": "de80427f22ce867d02c71fce9a18935e3a1abb8c7911a16c7c494afe0fa732ae", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120224, "uuid": "11f92e5b-0ab9-4cb5-be98-ec4e395575fa", "value": "T1CC32D01ED07964BB8A592994156D8EB2AEE7F883F57C1FA0EF67D970243323F51300", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120224, "uuid": "bbc18e8b-7d3d-4805-8be9-5fd65f73be0d", "value": "192:Yra52UEC3O38hQwVGQKL5Wg6+nbOctTsl1BuB/QLgQvmTdv3fGgR1zMr1jIrzV0:PVlhKL5Wb+bOcJsNkQLgQef7+z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777120224, "uuid": "64707e88-8ad5-4e28-a5e1-aa4148aa1d80", "value": 11520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120224, "uuid": "fdf14b59-7974-445f-931b-35b11c5a3008", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e99c630-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777120986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120986, "uuid": "ccae0b76-e36d-4832-9d15-b3fae31e11c5", "comment": "Malware payload (Mirai)", "value": "b86b7c6b3b864d0589d2c328a4e64161", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120986, "uuid": "3c30c08d-3dec-42ae-b89a-8cb4f9cdc9cb", "comment": "Malware payload (Mirai)", "value": "081447160d90eca72d84c18177dc1c5eddaa2884308b717e32297b0e3ea34d9d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120986, "uuid": "4fb3d784-66e0-4066-b927-b0133f8006a4", "value": "T10203F194C0DC45E5CF6E6EA40E2383CA2BE2095D337DFAD1B5D5E9E08982C26E098D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120986, "uuid": "cdd961ed-0595-4587-b505-97e981edabd2", "value": "768:vF7u8qvFAZbrMfDNPqwiCBfGxBXM/gssjWOSF8YfMOif60NBOQE/1w4Hx34uVcqM:v4dABrEDNPqAsGgl/SFvUl60NwY4H94Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777120986, "uuid": "e63452f4-70ec-4aba-96e9-eec579ccf39e", "value": 41067, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120986, "uuid": "bbe5320c-b60e-46bb-8b41-4b0b92f06848", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdaa154b-40a9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777123427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777123427, "uuid": "fe810b09-f6c4-4e73-bce3-2533031060a1", "comment": "Malware payload", "value": "b4bbf795aab9dc3193ed34a46e134906", "object_relation": "md5", "Tag": [ { "name": "pw-6624", "colour": "#951b91", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777123427, "uuid": "eacab7a3-7055-408a-b403-57d905053ba4", "comment": "Malware payload", "value": "307f88d9386205fdc5f2f9bddbd0fe19331010c298c8e2a3cde3fab3da519986", "object_relation": "sha256", "Tag": [ { "name": "pw-6624", "colour": "#951b91", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777123427, "uuid": "b4704b4f-572f-436f-92ac-3723dbded8b3", "value": "T194E6332675C4822CFFBA7CA1B10F109EA71E5EC4D0F2A3D59B6FA6718FCAA2144141", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777123427, "uuid": "35d59239-2517-4b04-b880-e36104fe1c1c", "value": "196608:9/iLZdlz84XHZ2MApcooiPE6RyMJSOvsOvVKv6L8aWv1qsuLq4ElNZ89UxY/d/:9/Edlz843ZOypFYyDrOvYSs1q5gSl/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777123427, "uuid": "1dada423-15dc-4022-994b-97a7529fec0f", "value": 14926318, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777123427, "uuid": "f2dc7582-165d-4236-8445-a993ae603dfc", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d55f6253-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127654, "uuid": "683baa0c-f13f-4715-9814-8dc35fb3cd6f", "comment": "Malware payload", "value": "c829337a74bcd5e3b6ae998bdb8e379c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127654, "uuid": "c3a1e9df-d6c5-4399-a88c-9907c970dcf8", "comment": "Malware payload", "value": "7a920b5e4ce75b70831346a97c37466329cb9e3b02cebb5354e007891f36291f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127654, "uuid": "0ee69f1d-7644-46f0-976c-ea7927adf801", "value": "T1D7B42369227F71900C7543A84B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127654, "uuid": "f1326e05-e6bc-4d05-9ecf-df8d06f16a51", "value": "12288:D7JZAaFpecqO3g/ALyYG0ZaDajTCXMO8xzDOe3Wy:DLpeWA/f0Za6TCXKBxmy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127654, "uuid": "ae14f169-26be-4f21-9c6b-f86a2bf4508c", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127654, "uuid": "87c5294f-fe22-4c64-8c92-31984f3c5cbc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d59fa388-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127655, "uuid": "2da9dee9-0922-441f-80be-c36425898e31", "comment": "Malware payload", "value": "81b11eb7355c70ff14c0adbf389c1e51", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127655, "uuid": "52829894-79e3-4d31-ae6c-ebe70ec04900", "comment": "Malware payload", "value": "de4372e86d6b7e3c9b31c2589a4f2dcc225517b8d3503c00d77fce311d17bf7d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127655, "uuid": "1e1d5872-89bc-43fa-83c4-b0a75711b12a", "value": "T142C42367226F72500DFE92ED4E4156186D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127655, "uuid": "29e5a4f0-bfc4-4931-8dc5-501189e15457", "value": "12288:AeCEhtm9qO3g/ALyYG0ZaDajTCXMO8xzDOeQake:HtoA/f0Za6TCXKBxlh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127655, "uuid": "3d9a6baf-ef10-4e50-81cd-60fb061768a4", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127655, "uuid": "568692cc-37b2-4db2-94b8-65c9e1d41b4c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d61086de-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127655, "uuid": "c9d919eb-2542-455e-b69a-40f2330495fd", "comment": "Malware payload", "value": "ce39733e5cac0d14cb120281c6d2825d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127655, "uuid": "330e5771-33c9-479b-a582-7100cafad9c2", "comment": "Malware payload", "value": "88f3e012664921ca342bc321498130fffc53cefed41e3c642f39780c2581b3be", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127655, "uuid": "26dbff1a-f2c1-4d95-91af-d8e24cec5e52", "value": "T10C553387803C29944F3D0BB367FF955CA2248EFC100309675E2A9C97363E79F82659", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127655, "uuid": "af0bdf76-6643-4bca-b419-c5116828dcf1", "value": "24576:jjqZmcpuYoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRT:hYoZ9bq+MmMEL+hcjXHC/wnwdT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127655, "uuid": "b7daeed8-ffeb-45a2-8805-d91fc04cd629", "value": 1394887, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127655, "uuid": "412414cd-0660-4114-9b1d-789c59d69a2d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d62b1e7b-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127656, "uuid": "e000ce1c-17b7-4da3-ac45-e524994f5cdf", "comment": "Malware payload", "value": "11c58adb25f21ef40ae8346ece1740f8", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127656, "uuid": "e8d0250b-fc1c-49a8-82b7-70b45b3936d2", "comment": "Malware payload", "value": "fe67c2d5aaa128bdbaa9434365123a428a3b5c2dcc246b744d3af9c58b470c2c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127656, "uuid": "6c96f810-7951-4658-908d-9429becf0022", "value": "T118B42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127656, "uuid": "46b48ca4-8cde-41f0-855c-56d7097f1b24", "value": "12288:E7JZAaFpe3qO3g/ALyYG0ZaDajTCXMO8xzDOe3WM:wLpe7A/f0Za6TCXKBxmM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127656, "uuid": "a8671603-3eb9-4059-b5a2-7256fae70e13", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127656, "uuid": "e0ac597f-8e84-486e-a412-5e7471e2f392", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d62f1a68-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127656, "uuid": "f218710e-3a54-47dd-8548-418d78847b16", "comment": "Malware payload", "value": "b23e42ffe3022508e4bea82df159c3b6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127656, "uuid": "527e80ff-91d2-4643-af58-0bb84690e375", "comment": "Malware payload", "value": "93e69ae5bd33fde730acca0dbc2dc3a9c74a820c649b1741a0e57637a54a60c7", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127656, "uuid": "a728d9dd-7527-4a67-a61b-faff09ff6439", "value": "T154C423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127656, "uuid": "03b894c1-d460-4e52-a333-3c3bec43fa2c", "value": "12288:FyBXIs7rM1ncqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5w:QImQ13EA/f0Za6TCXKBxe2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127656, "uuid": "9ab8e2b5-58eb-42c1-b467-e2656a613260", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127656, "uuid": "fa399a22-6f66-4c5c-bf53-fcb15d40d0be", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d644914d-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127656, "uuid": "e896373c-8a99-4c24-ad2c-4f7b516580c2", "comment": "Malware payload", "value": "b2632fd22474d458a6106342c4692978", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127656, "uuid": "f086ba97-79e6-4633-8448-0a5c99a65f52", "comment": "Malware payload", "value": "1e65601c69c7b4267aea96d942218ff9d82743eda58ba8bf1ac54ce3ba27ba2c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127656, "uuid": "a5b2a161-fe28-4ff0-a2f5-f00a90e618bf", "value": "T19955339BC13D15C48F6E0A57ABEF958C7214CAFC204205732F1249E7393DAAFC2656", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127656, "uuid": "d449ba3d-599a-4108-b883-f9efba09ad4e", "value": "24576:KzlCwUoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRR:KzdUoZ9bq+MmMEL+hcjXHC/wnwdR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127656, "uuid": "cb90c094-f1d3-4074-8bf8-d10243fdbe8a", "value": 1394781, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127656, "uuid": "129ed60d-4a4e-4ae2-b456-61dc3aef0786", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6ba3933-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127657, "uuid": "284c2d61-f9e5-467b-84b3-5b1b027bdf59", "comment": "Malware payload", "value": "8ade5ae9c35ea932d28af8197a272c6f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127657, "uuid": "33f8b8f3-a55b-43a1-a88c-fdaf99ab9fcc", "comment": "Malware payload", "value": "459866a16b70e769b2acacd464c44382dcb4693daaae9c48da6f0f671a5f7653", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127657, "uuid": "610fbc2c-99dc-4399-84de-32d69db5ec88", "value": "T1A355339A407D29844F3D0A6377EF9A1C91108AFC10420C736B6A98DB663E7DFC7749", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127657, "uuid": "6b8b369e-8a20-4ae6-840d-bb9733490db6", "value": "24576:hyJePoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRE:6goZ9bq+MmMEL+hcjXHC/wnwdE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127657, "uuid": "8d2cfe19-ae78-4dcd-b65c-c35f32b6db03", "value": 1386736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127657, "uuid": "fcc164a5-542d-4542-bf84-d556758f3158", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6bcfa2c-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127657, "uuid": "d57eeb5e-1611-4e7d-8dbe-9bdd50db8e8f", "comment": "Malware payload", "value": "9da472167a1929d07969032c67be2304", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127657, "uuid": "7bd7db6e-b804-406a-84ea-cbf72523ce07", "comment": "Malware payload", "value": "39c6c559be745c9f7afdd7ddfd7d41c5706dccd2174dc7ea6198aaa2ed4c5e50", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127657, "uuid": "1896c4c6-7a0c-42d3-a85d-9b09369f3a52", "value": "T1DCB4231AF4D078CFD68ACDA394292C785F6C96C9CD126B7247C4EE9312442F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127657, "uuid": "6a6c6556-ecd0-4d30-8937-2e2250554204", "value": "12288:NTibgSMFBOBSlqr/Ku7FxPbzJTVBU+8JM9hAC8Z3eVOBRkbKQDiUbpKM:0cSMFY5KkxpTKJM9mCw3eVOMWAPbpP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127657, "uuid": "100ee2cc-c5da-408c-81f9-a67167bbfc67", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127657, "uuid": "4fbe8137-02c5-4549-a47c-75b604033678", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6bc0c8d-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127657, "uuid": "c7130a5d-7a26-4f50-bf68-fe7a4a89a3df", "comment": "Malware payload", "value": "7a6c479c21b8fe350542e4c3debc32b3", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127657, "uuid": "df241451-4e94-4264-9cc1-d661bb953d3a", "comment": "Malware payload", "value": "53e727f08c8ae64bff66e4187a2a735b121d0c8d3335048395f3a3b2e72878a1", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127657, "uuid": "9f13b31d-82f8-4643-aae9-f6b19fbbc506", "value": "T123553387813C29844F3D0BB367FF955CA2248EFC100309775E2A9857363E79F86659", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127657, "uuid": "c3146d50-4a67-4a43-8a6d-9cbaff1e12a7", "value": "24576:djqZmcpuUoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRd:XUoZ9bq+MmMEL+hcjXHC/wnwdd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127657, "uuid": "44d042ec-5571-48e5-9c12-f29bbf5b6b25", "value": 1394887, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127657, "uuid": "c85668f9-82af-4494-9a74-86ee3e9a4033", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6cd1bc9-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127657, "uuid": "d0a43db8-5815-41c8-899e-b8d43f74029f", "comment": "Malware payload", "value": "dccaef2a9d757572f282a725f95f4bc2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127657, "uuid": "e28cbb1c-7dfc-440b-ab8f-c19f1499dbac", "comment": "Malware payload", "value": "06dc7eb9b490431addb5adf34dd07b7ccedf0f04aa897fd970165eac8b219b53", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127657, "uuid": "be1312cd-a07b-4a21-856e-7ec9a7cb949e", "value": "T1155533C6C17C25C44F7C0A736BEFA56C51188DFC200208676F6A48E7363E79F86B59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127657, "uuid": "165da05d-ad7f-4cb1-9909-324c21ed8d87", "value": "24576:3gnp4wFoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaR/:3kOOoZ9bq+MmMEL+hcjXHC/wnwd/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127657, "uuid": "f10dc553-76b6-4451-a0f3-fcba4a26c1e0", "value": 1389021, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127657, "uuid": "38196322-95b2-48c5-8a54-a570377c39dd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbd7433a-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127665, "uuid": "d82e0b93-c6cf-44c3-905e-f86f1490feb8", "comment": "Malware payload", "value": "6bc14ccaf2b89f01adc33905f7217961", "object_relation": "md5", "Tag": [ { "name": "BlankGrabber", "colour": "#f1c814", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127665, "uuid": "8305d44f-0a79-47d8-81a2-f635c89260a6", "comment": "Malware payload", "value": "90d8617d0dfc5f87912f7c3abd9e123ecac8041cb6ef4cfd813aea744c4b50c6", "object_relation": "sha256", "Tag": [ { "name": "BlankGrabber", "colour": "#f1c814", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127665, "uuid": "81b5c8f3-de2d-4ae9-83b3-d942065a312c", "value": "T1724733FF9685D66DC1C494B6E9E2366912FF2CB4378B176F132101E29B124C0CA958", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127665, "uuid": "ad92c0fc-2479-4d8a-9847-9f22998a57a4", "value": "aaaa97ae38376e73b9cc256f241c9f8f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127665, "uuid": "3bffaec0-df2a-440d-a3b0-8ef0a2e6f063", "value": "393216:FFbiJ59K2caI2xe+FLzqe9rTks2g1rPTZcsyaFr+Wu+xEipjQH+4TSRC7Q1hCOb8:To9K2c52xe6f1VBcAKKxL1yO11hGEhc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127665, "uuid": "94efff14-46b1-4c81-9909-9f08ba322de6", "value": 26510280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127665, "uuid": "bd80f19d-c1d5-4bc6-b780-f7a46cc17e06", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00f047ff-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127727, "uuid": "478410bf-de31-4ef3-8c69-d865def788e9", "comment": "Malware payload (Mirai)", "value": "9c7a7b9257b730e25f92db72f6ee2cde", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127727, "uuid": "b41d213f-eb11-48ff-b29b-78dce0c6dbef", "comment": "Malware payload (Mirai)", "value": "1ff4219c3df24d05d1e4e80ee0005b5366554fda404445b3cf3746c0e8163c69", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127727, "uuid": "3f36fe36-e32e-45ed-97db-f12237c3cb71", "value": "T16113E0341A04AD99ED52A5FC47A267543C300B732103DE4B3B9974FBDEAE39C35626", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127727, "uuid": "9d2f5163-69d7-4890-bab2-2002e1e9610d", "value": "768:QJWyTefK+KTyZngpHuKxZMG8j7o7q7o/3aEFuXpFJgGlzDpbuR1J8Rw:HyTeXK+9gpOKgjNUxuXp/VJu2Rw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127727, "uuid": "1e61baa8-5d42-4bfe-949b-a402f61549d3", "value": 44075, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127727, "uuid": "dc8b8f87-bdd1-4801-b4b2-f206273d253d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01015d99-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127728, "uuid": "9cee390c-4db9-4a43-a009-0ba3b709a4ac", "comment": "Malware payload", "value": "8ad0a9aa218367738d0c0c6b45097464", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127728, "uuid": "844b90c9-260d-46ce-a2e0-51d34d28411a", "comment": "Malware payload", "value": "fae0a3c4bc39ea8aadd96f9ecfe7d0eea54970d0df4520825673a52450fd5e75", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127728, "uuid": "0d475147-8663-4da5-92a6-2de6e702ddd4", "value": "T191B2E025414FFE7492B01E33FBFDC313AA9E83A9D278A119387455B47AD1D8A10BC3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127728, "uuid": "1b4845e5-7d3d-4923-b74c-d5f892ec6bd4", "value": "768:+N8TgPBilGVePumSt9H9Ul9bD+xs3UozW:XeMPudr9Ul92czW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127728, "uuid": "cc6ae08e-9a63-454f-97c1-637314300482", "value": 24895, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127728, "uuid": "de584fef-1765-4acd-9ec1-f2861dfb8dc0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0143d3bc-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127728, "uuid": "4b264ccf-c3d9-4585-8049-2009b6fc58eb", "comment": "Malware payload (Mirai)", "value": "a3272736bb02e69eefe3cf12e1e0b47d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127728, "uuid": "fe4f784e-9ca7-4331-a647-1df75069171d", "comment": "Malware payload (Mirai)", "value": "6cf3afa752de73fdb9e1e232d0507f1626c132243fb5d7c5cfab9221fae80ef9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127728, "uuid": "4fb0ae43-14a8-43df-b186-7110cac30799", "value": "T1C913F100A5497CB4D8306F76FF29C59C37F53BBE62A4B8A72611C128A24E027E1D1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127728, "uuid": "1132c95c-49f7-4d38-9419-16a67715c45b", "value": "768:f6pGk1fgz73Wtktq0vXVp9XTGcoIe89K8Mt43Gpjvdr2584OVKS2jw75qdYn+AsK:mYz6tktq0tXT1PeM2lpD/4OVEMqGnezo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127728, "uuid": "443d72bf-82ca-469c-8f59-2d09b4ed3a7a", "value": 41595, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127728, "uuid": "3a686a98-8d72-4597-941d-d29a310b4053", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0157d802-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127728, "uuid": "4530b6ed-08ce-4179-9ac8-c9314d40ba12", "comment": "Malware payload (Mirai)", "value": "16caa1e282fbced87fb5ea00d928afbc", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127728, "uuid": "1a4c8b90-e650-421f-a261-fdf3e273adff", "comment": "Malware payload (Mirai)", "value": "67911940123ed6a8e4a94bc0b9580c38dbb8f86d4128ac6ea3d713c0099721ee", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127728, "uuid": "2a790643-7679-4af6-9145-63a82f53dcef", "value": "T1F7934B81A5C3E8F1EC05143A317F9FB29DB6E67B3035EE92D7E8AD229854A02D1057", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127728, "uuid": "725962a9-7dc1-47ac-a640-6e54eaee68ca", "value": "1536:6KLtcEOx4HzcR7t9YRG74QDipmxQCpMmRUqUZ37KoBree9Dt+EJAY:RhdOx4HZRG/D3xQ2MEUt3Gote0R+K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127728, "uuid": "cd5fd48b-e4d2-4266-977c-18d48397812d", "value": 95120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127728, "uuid": "ecac4094-5f90-4bd8-965b-77fd9dbcb294", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0192ebd8-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127728, "uuid": "92045f20-a779-442f-a10a-b209711948c7", "comment": "Malware payload (Mirai)", "value": "3837396128730854e406dcab90b6cfd8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127728, "uuid": "c29f6fef-4eff-48f6-8962-c1c8570a8c28", "comment": "Malware payload (Mirai)", "value": "41f7cb6ee12c101ed6c46a36a3d7ff974b6961f81a2cb46cb3dc7d18c3dc3bef", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127728, "uuid": "12fc78aa-1142-4df8-b4e4-0058d4248b2b", "value": "T155A33922B9751D2BC8C4A97A62F34335F2F6479A20BC8A1E7D610D8DFF2564032677", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127728, "uuid": "8d5439e0-f641-400f-932a-73f0826b0179", "value": "1536:VOyxOT6RwqR3X8GGhWxgIUfqD8tNxPJA5HrbU0s8rtUrq:VBhR1YkiVjJiEXq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127728, "uuid": "50d719a9-4c57-4077-8f60-29607cacf0eb", "value": 100139, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127728, "uuid": "933c39d2-1ec3-464a-9ff6-9bee6b6d5caa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01a7ad3e-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "67d37090-8e97-4499-89a2-9d3f6a1d04ba", "comment": "Malware payload (Mirai)", "value": "17046f1d16f9f33a16eaf9db2ee8260f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "6169035c-5d8e-4b19-9d75-6e15a74e19c3", "comment": "Malware payload (Mirai)", "value": "59b998a75871fb925e09c4f317dd4124e4be7a40ce4c67b9a2eb6e63068485d6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "753b71fc-300c-4599-a2bf-4f399a9a37d1", "value": "T15AA30789BD919A21C6C526B7FB0F018D370263E8E1EA3203DC245F6176DB81F0E6B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "aca9627e-7163-4bce-bfac-b6388da4148f", "value": "1536:HXHRnvW8TOKvyY88Gzv4G8204dzEsbEs3Xw2tdIYAHDnmJN9qAWyyvULJ:HBnO8KKL8SG820azELOXw2PIYAjnQY6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127729, "uuid": "11e74d93-f4f6-4533-9326-d5e42bd135d0", "value": 104068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "04e0fad5-0156-4058-b2ae-dc493669fc08", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01c48d3f-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "5401cfb5-68b6-4857-9789-c9ca9873ac02", "comment": "Malware payload (Mirai)", "value": "4d94d91512505fd0d68ce066886a3baf", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "8e4bd248-2e5c-4c2d-b50c-2fa0f85526b2", "comment": "Malware payload (Mirai)", "value": "5b40a4fed66e08fe58536c905c498a160900728afed6a320a221e27f8d95b39e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "efb82554-ff01-40b0-931a-2529b885df4e", "value": "T179A32AC1F8C780F5DC5B8834609BB77FCA31E96980309B69EF95AE25D63BA0191133", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "42a78d34-30be-4294-96fc-0328068a83e0", "value": "3072:vl8jdYcBgdHSZL0H3exJ01WCTPVBicz3fThQ:YBBglAjJoWZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127729, "uuid": "32a89369-77e4-4392-90ad-56a021f44e6b", "value": 104112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "6400d2d7-bd8b-4673-b323-48fe1c5fb60c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01dccb7d-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "788edeb6-fbcd-4d8c-b03e-3e8d0d714d58", "comment": "Malware payload (Mirai)", "value": "4e6b4fbb022797e4a9e7cd50cafb1dc8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "06143f87-0696-4749-9e13-432bd8cc9358", "comment": "Malware payload (Mirai)", "value": "b0a1576deb02ae9b844eb18985aebb3cc64577b8302c897687d258b663b33967", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "e9014d66-a61c-4729-9c57-5eb93d6e8043", "value": "T126A33A5AB800DD7CFC5BDA7745230A0AF93162504E920B667363FCA3BD571F98817E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "80a36425-0ea8-4a4c-b91a-f3e8a403524d", "value": "1536:uj8TtMGGcGuPC5tekVYmSZMCvim8rzQoz8US4zBTlLUFGu2j3VJXlMtk:ac9PC5tvumCvij3QoesLaGldWk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127729, "uuid": "074f5c7b-eceb-415f-9511-d42125762b0e", "value": 100556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "ffc1384c-a4d2-43bd-bd05-99c4c2be5207", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01dd94ac-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "c0c32c81-73bc-4126-870c-e6bdb8bec54d", "comment": "Malware payload (Mirai)", "value": "ed9d4db2d2c79bceb5b2e91c67925fd8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "9e3ad64f-95e3-40a5-93a1-576f807a2f97", "comment": "Malware payload (Mirai)", "value": "099286ec53d7cf15e12a171fca074ef1a312f0985c0c981736604764323dbe21", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "a5fe0491-4d3d-4e6d-91a4-f3d574f00263", "value": "T115A35C0177898943E6A71DF5293F17E1C3BEE98023F4F68A260FDA4541F1B730589E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "95c1cee2-a6c5-4faa-9441-a7cb4979d620", "value": "1536:JFgIMYmLc6lWmjBxDVEOjrj2f7untKK8Iqcxl:JFgbYQ7WmBXVnkKPl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127729, "uuid": "0a3e281d-726d-4baf-920e-124b77942183", "value": 99564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "4875cc48-9b6c-4454-8c8c-2eae8f8e3bef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01eb1d02-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "e148e02e-00d0-4ca8-96f7-f237cc0919be", "comment": "Malware payload (Mirai)", "value": "905cd193ab0159519bfc06affe031b1a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "0ea568db-7c5c-4474-9af1-9b50a8659fbd", "comment": "Malware payload (Mirai)", "value": "c8947ff0a47857b3ecaca59692ffec3de4d793644a19379cc044155d54534a1d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "afe44a31-b7eb-4009-95fa-2f8d9f579aaa", "value": "T10CB3088AFC919B20C2C616B6FE1F118E330257ACE3EA7212DD145F6077CB95B0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "0e1e8cb5-c856-4922-a450-42c25bdc479d", "value": "3072:ynbMMlqc5m21i2PnxraI/dcVUyu63frz:yQGquDxragcVzz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127729, "uuid": "7c01d842-d353-490e-8fa2-e0fec465e87f", "value": 115852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "00f7b107-f39c-4cd1-a572-9fe850b20fc7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "020d97a5-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "7b7f4be6-de06-4ad7-a640-3fa70ae7929b", "comment": "Malware payload (Mirai)", "value": "77473806a8eb95272cc828dc581b2c2c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "1ff49cfe-a4ef-4539-8bd2-78d347867403", "comment": "Malware payload (Mirai)", "value": "b7fa474f4a086a67027dede987632bc8bd97e4076158833dc0ebff0a9b205111", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "db2ff566-a8a1-452b-a308-4a5f8260300e", "value": "T17EA34C46EB87E8F0CD4505B8215BAB75DD35AC733020EF97EBD8FD26AD59603A0066", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "285a1c63-b00a-42d0-863f-dfd933b11f02", "value": "1536:gcdhIxsW8rEMUN5VIYyebl0YojObbHwFNMIU531UN2Vz3Vr:gcduMkmYyebl4j49V+N4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127729, "uuid": "986638b3-a7fc-408d-a8e7-a815687bf6e3", "value": 103048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "bdf4be2f-a2f4-44c5-b27e-a3ed7d743cd4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02159310-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "18da8a6f-c013-4250-a638-d37a8380eea2", "comment": "Malware payload (Mirai)", "value": "bdfd216b579c848849ab98a0c308d3b9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "ca8572ae-4ff6-492c-a64c-b5098023829c", "comment": "Malware payload (Mirai)", "value": "84e086ce43c977c310727542442ade3f8742d66cd66aa0a4911fa2f893833bfb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "4bfc9935-a6ee-4391-92e7-af662e2cda73", "value": "T1D293F8705889F73CEAB91078E4021AE62A520A183FDDA5E37CC7643EFF753487568E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "578efefb-77ce-4f5e-a8f6-66ef712b87da", "value": "1536:FhEIQl1O9WDwKZ4iobnVvy031b+Ge9JVBIVCCfy0K9XSS1:wIQ/O9WkI4io47uIJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127729, "uuid": "a6fb639c-f587-4feb-8f0b-151d1b394904", "value": 91732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "ca4577be-aa5c-41b9-8dd9-1cdd97d502f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0222a98c-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "3180ad27-9563-42f9-93ba-3a4932c86ef4", "comment": "Malware payload (Mirai)", "value": "20f6689c2e99995ad35eaf96a55531b8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "902f1bc8-e0cf-42e4-b9ff-e8fa0f93f494", "comment": "Malware payload (Mirai)", "value": "50b5a3446251b5289266120c508a0b6950e0e430ed3f468f77e6b18ced372366", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "a96ba463-5f94-4833-a22d-f8cba670f120", "value": "T187D3725D3E355F3DFBEC823897BB8A309208339A26E1D584D19CE9012E7074A741F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "b3982a59-d1dd-47cd-bb38-ebbb9631db9e", "value": "3072:UFEl9vh0Q1GvDTmvzMVERmPSOh1xD2vexBw:UEl9Jo0qERmPS81xSmHw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127729, "uuid": "0952580e-6c14-4de0-b060-80596a1096ed", "value": 137880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "e5964bbb-b361-440d-ae07-d53436f97539", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02251f5a-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "2c0686a8-db87-4d64-a6fe-e840149f5dd8", "comment": "Malware payload (Mirai)", "value": "cbf51c9960459f060784e8f3809c42d1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "efbeda8b-40d5-4682-89e3-28f533c789f3", "comment": "Malware payload (Mirai)", "value": "a4b48a0498e3e507c61a484723be0738d7306efefe2f9e194290bbe2aa5338e6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "5c198a5d-bda5-4b0a-b8cd-26bbd7191773", "value": "T14B03E001D43F4364F94B643642F66AA34668FC4521AE4C1DF0E4F97BECAED366C29B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "9ac6389f-6101-420d-8927-92b63bc4d853", "value": "768:R1uCqvbT+l+veAgIHhX9IVQOvA3S3XglfGEn3K7nUDypqZVeynbcuyD7UHQRj+:R1dQH1fhSHCSgsL6eynouy8Hyi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127729, "uuid": "dd7dff5b-2488-4609-8782-10e7b006e602", "value": 40387, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127729, "uuid": "b4322c38-3c7b-4b30-a7ac-1800f90efc74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02474f19-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "abafd87b-1274-410c-b643-3b499f677894", "comment": "Malware payload (Mirai)", "value": "930648cfdeff8968a02f7231a67e3bb3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "64c01e70-6d7e-435d-ac6b-5c422559ff5b", "comment": "Malware payload (Mirai)", "value": "c1da7fdf5c20914a29e5b21b05136b340ec24ea190797db59a0c1da22404f4ec", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127730, "uuid": "cfb13c74-0523-44a8-a6c8-3e059c4d77d6", "value": "T1B64412D4AA41B94DAAACC7711C61068B750B85E4DCEFBA228D7B01E2339035DB7CF6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127730, "uuid": "20552bc3-71de-42fd-8f16-e9ab53710aff", "value": "6144:A4bjwu8obEcN62Vnb6IOlrCXXSmxtIJluLp6cAiy:A4bp8ob1N7l6FCnShb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127730, "uuid": "42612d87-c856-47ab-bb81-3f159f695ae8", "value": 273164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127730, "uuid": "6523d157-7355-40bd-bee0-0c3e3e69afb6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0269096b-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "17bc5baa-00bd-42da-86d9-55e26b75ed38", "comment": "Malware payload (Mirai)", "value": "f9d8a227f81495494984131dea7e6f03", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "1ca9ceef-657f-42b9-872a-5ef07a6b7ffd", "comment": "Malware payload (Mirai)", "value": "774c41f09d9b0fa7e17efe706b777aa4c8af862bf0ab7e33e0e52a23bc7d9a5b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127730, "uuid": "b6261e36-6f5d-4170-9172-edac0194475e", "value": "T133730989FD91D728C6C512B7EB1F118D3302A7D8E1EA3203DC245B6476C690E4E67F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127730, "uuid": "deb68f45-b561-4a89-a5b1-94eaa4332286", "value": "1536:tjCDjb/jXNciLw/yGGLL10w+rzP+52UE2Es3Xw2ty7MxN:tC/jdciayL10w+rzG2POXw2I7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127730, "uuid": "040a69e9-5a64-4a23-b287-a2fb7ed361bb", "value": 80552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127730, "uuid": "82a70f53-e9c5-4a2a-913d-0a81353ce1fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02659649-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "f12386cd-cc8d-444e-9ed3-b8bf38d09eba", "comment": "Malware payload (Mirai)", "value": "95fc7548bd8cb545cfcf51e9795c625b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "1961b53e-6eb2-4021-beb8-983a83a44308", "comment": "Malware payload (Mirai)", "value": "0076391e19172dbe6ced919f80859960e5e2c93082abdc1291800d5b36488158", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127730, "uuid": "bc5ce501-7b59-420b-a489-89c9dd33b6f4", "value": "T11FC39DD7F34B1491C4A20AF047C74FAE6AA3A1118F5FD9E72C1EB63B18794CB49067", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127730, "uuid": "3e8846bb-93c2-4b96-9429-5be0f2716010", "value": "1536:Li33dUfTydsBGeOXFbkDpo914ogSNswlHxS47r3cxbJnMgSGR/LWAO:23OtBGJbEps1PDNswXS47rMMgPq5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127730, "uuid": "5b0cff7f-7785-4e65-8489-0820d1d37df9", "value": 124667, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127730, "uuid": "d9ffb1b7-b870-4015-9966-d4ff0f839f61", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "026c4d69-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "f5f9bee3-756d-44c5-a80b-ed1940be7d50", "comment": "Malware payload (Mirai)", "value": "e92202cc1775341a8110aa1068d1839b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "bdf02090-6e6c-4317-9e5d-0a562062fefd", "comment": "Malware payload (Mirai)", "value": "bfe3c83b6a43db2673b40160a23187331f8c94871245ea80aaee57e0324c400c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127730, "uuid": "13f6548b-7b64-4dd5-95b6-85794cee86a1", "value": "T1F74423680623DBCAD31929E56EFF809C294F77340D582BA085ADD38D07FE039D39E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127730, "uuid": "51d8d787-e9ec-42f8-986c-bd39f82a1476", "value": "6144:v59j5rPkP+B8Ewz9oY8Tlk3Vjyckw6ybirGoVoXRt03:v5ImBwz+Tu/bpRi3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127730, "uuid": "480bccb1-b27c-4422-8903-0e6e7452db79", "value": 276056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127730, "uuid": "174fcb14-487d-40fd-b2a7-ed9e450ed562", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02c89f34-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127731, "uuid": "b403eaf7-3934-47ea-ae9f-88a66ea1bb20", "comment": "Malware payload", "value": "362d2c504849750ef178dc220815b6d9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127731, "uuid": "5549613d-0a9d-4119-95e3-fae60ba0d5e3", "comment": "Malware payload", "value": "76eb8a8c051ee1a31e467a4f9cb1280ce7e859701ab07e782b92e0fe73e985e5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127731, "uuid": "51f2d57e-7680-472b-bd80-a442f724a3e8", "value": "T12BA42397E39996EC88C47ABA8B2C0D08B27CE7745CCF06A8537E5335D1689A29E035", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127731, "uuid": "2761fff1-213a-4d30-80e2-a392e67e9b35", "value": "12288:KsS5lyFd6k+6sVXkvgSe5yOqr++rVOje+yH5A:Ksgx16sSvP1y+6eTH5A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127731, "uuid": "b6d57d96-1c7e-422e-94ef-36759708cadf", "value": 492541, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127731, "uuid": "85d6d81c-f752-4dee-9832-c85ea9b96f75", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "035f593e-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127732, "uuid": "792c7e12-4e4a-466d-8c7d-b5803c2d3cbe", "comment": "Malware payload", "value": "7083b6c22b87526a0a4facc6080fb64c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127732, "uuid": "dc1cc029-e5b8-4ac5-b481-103c2e78942d", "comment": "Malware payload", "value": "4e5b74409cf467c839916542a638d910208155e2045d4b50ec42029933b81710", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127732, "uuid": "9bce6fce-a8a4-4b4f-8409-2c2fc5bf2892", "value": "T11BA42397E39996EC88C47ABA8B2C0D08B27CE7745CCF06A8537E5335D1689A29E035", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127732, "uuid": "b73117bb-aac4-4898-a7b1-6230d469bd42", "value": "12288:ysS5lyFd67+6sVXkvgSe5y9qr++rVOje+yH5i:ysgxC6sSvPAy+6eTH5i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127732, "uuid": "1784f955-fc4d-4338-9d78-51b042525ac0", "value": 492541, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127732, "uuid": "29daa7d3-afb6-4879-83ba-91f493a64489", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03d15efd-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127732, "uuid": "23e7f5e3-1748-4a1c-b143-a1915edd9ab5", "comment": "Malware payload", "value": "7f11c2f9c071c16b586dc5a60b7574c1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127732, "uuid": "602a0346-5c49-4f51-b604-f4c3ac77e6b6", "comment": "Malware payload", "value": "2f483c1a4e5638c54cfa78fc03546331f79b595b617cb5c2cb822d75206c962a", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127732, "uuid": "9c80c581-615c-4817-9df0-e7074e84de06", "value": "T134A42397E39996EC88C47ABA8B2C0D08B27CE7745CCF06A8537E5335D1688A39E075", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127732, "uuid": "6b9469b0-a304-4e42-bb54-91ea5f436760", "value": "12288:WsS5lyFd6i+6sVXkvgSe5ywqr++rVOje+yH5g:WsgxD6sSvPHy+6eTH5g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127732, "uuid": "09cc586e-f6c7-4743-937a-9217d6fabc50", "value": 492541, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127732, "uuid": "5f4ec276-489e-4bae-94c3-ea90e06f3aaa", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03f91941-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "7b83a0fd-f2f1-4cd0-bb53-ac58927fde15", "comment": "Malware payload", "value": "8cffff58be5c1ae04d7ba42ccb3f6d0e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "a765f4a9-13c9-4516-bdfe-2d159ebcbb76", "comment": "Malware payload", "value": "2475ff07cb454b0ad3190520899e4f1a7bcd1c6045c6a8388f59f61c593a9521", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "af236f91-617c-4312-b85a-3d676c3b127e", "value": "T1C0A42397E39996EC8CC47ABA8B2C0D08B27CE7745CCF06A8537E5335D1688A39E075", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "5a6157a3-a8ac-4bf8-93b5-20ce9cf6975c", "value": "12288:6sS5lyFd6c+6sVXkvgSe5yyqr++rVOje+yH5U:6sgx96sSvPJy+6eTH5U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127733, "uuid": "2d793a3a-db5b-426e-912a-51f85fff33a2", "value": 492541, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "73630d3d-b2f3-4950-9ef8-1212cb7be5cc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04225f4f-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "e0a2cdd2-5d93-4c4a-bf84-296405e95e89", "comment": "Malware payload", "value": "9c5c33971faa06c2262e04bae13a78a4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "3edff086-125f-4353-8e5a-94019873ae67", "comment": "Malware payload", "value": "0d0f42efd3356efdcdf3f7a42ff36355dc43dc5900a9e35b5a170275c931c380", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "8f1a6c9b-f1de-499b-891c-37c2e4628a37", "value": "T1A8B423F193429E0B23A4DAB457A3DB3375CE7292769D9301CA06CA9F4C7072886DC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "186d919c-b3a5-4d95-903b-b21b5875258d", "value": "12288:Gkmht7DrvdyieCCH1oHF9nJ/qjuyZgoJrrzTPwko:GkmHzMHH1ELnKZgoJnn0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127733, "uuid": "c5ed9701-97c9-423e-8f6c-2ca68458833e", "value": 493748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "7300e908-7d09-473f-9fb9-88a13923e422", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0422fcfb-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "70837bf0-6ba8-430a-8906-6baf09421bf1", "comment": "Malware payload", "value": "e1e49b6dc8e71431888a3e22752680e4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "b0614510-bf52-4a97-9864-bf788bb991bb", "comment": "Malware payload", "value": "416ce5621ced69b72934dacbe9c1c06925c615222f9eb16d7830045783febed5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "a07705c2-fb5c-402d-870d-c0cdf42b6603", "value": "T1ABB4235A2EAD7BE7CD91A05411E132682C1A89D8CA77EB059C5C42F20877B14FE5F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "a008cf48-ba20-4beb-adac-57eda51c5883", "value": "12288:Kyl/3BItd+3+JViRziobl9jcr91+rTY3rkC0uvq39jP6Fe952/mC5s:p1+tdb0RLbl2rKY3ICYJPF9YXs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127733, "uuid": "fa83e142-34f7-4376-a31f-89956822a23e", "value": 531063, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "c9f4a4d1-c927-48a2-b65f-d4d72374c9ab", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0424470f-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "d2b729d1-2ea1-45e6-96df-f7d5ad5ca587", "comment": "Malware payload", "value": "533831866b3ac3ee83b8ab4ec9bcb23d", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "80597034-27aa-4e85-9555-74d0b2d906d5", "comment": "Malware payload", "value": "64c43136b9f8593930d47eca44b428090558c7e38842bdd9e215a980e03bb6b8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "7e269467-fd35-4973-8023-8778303058ad", "value": "T116B423CE5A286CAC5BE85E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "a06d70fa-6653-434d-8287-1c6c6364c640", "value": "12288:VGRl4nbDDGIabs/7iiEVwYg2l3/2NHXy+wK8t:JTabs/7iiWw0Kixt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127733, "uuid": "4cad369f-1216-46d7-b422-f17dc1828700", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "9af15827-355c-4f1f-9ab0-a2584e20fca4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "043df00a-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "c25c4f7f-a87a-4c1a-8ef4-b0f658682262", "comment": "Malware payload", "value": "16bfb1808caec54989ab49b49c706aab", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "611eca6c-507d-4f44-8b97-64841e83c1f6", "comment": "Malware payload", "value": "d59109456b59653bb7b64bfe28395e3f9a4b9576fb5a4851869dd80f9e857173", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "5c21c8b2-c5f3-467f-ae1f-b9ad216a2cc7", "value": "T1C7C42304680691EE83D23B6DB38047A0BE7A50D7F70DB20416DE7AD17DE967077E8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "0eacecaa-3ead-47e0-ac00-4aca3913a1c8", "value": "12288:ujXIfpqn5d6wlOMWROC/FTeHo22Qm7NzofOrAHmW:CIfo/4MQOC/gHozN7NzomMj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127733, "uuid": "c9b7b21d-54a4-4df4-aee4-a94174514cd2", "value": 578961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "c095e42d-1007-4594-b37d-3634b8ab85ea", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "045272d7-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777127733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "c7bba6f2-e1ed-4725-b9ea-49da9087e03a", "comment": "Malware payload (Gafgyt)", "value": "1ef2b8070f36d2dce49e376ed5127fdc", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "ce3650cd-e7f5-4d90-b26f-e3cd0a5fb262", "comment": "Malware payload (Gafgyt)", "value": "4f2d3089a1af7c9aeee6492cd09f9c012e0420728cc4003725813a4f502bc345", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "98ee1c3c-0387-49bc-bb74-b26a78cf3b34", "value": "T18513E1D3D7B9EDD5C4B6697404520740AC83F4AB98BF1F7B08A82AFC8ED25132B55B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "92d8392c-1423-4e97-a5c8-6071e8bc183d", "value": "768:G1kNnUB9rSwYp9LimpnQoV04lQDVYbgXCfi8q90HW6big+Dx0Vx:B8Swq9LimpVrvfiH0HWsa+x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127733, "uuid": "5a1179c8-ee77-46b7-8217-1bf941c68c42", "value": 42559, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "2afaa8ec-0bbc-442e-81bd-d941bf8ad970", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "045c3deb-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "3d07f663-d39d-460b-9f7e-9cef0749695a", "comment": "Malware payload (Mirai)", "value": "865f5e521394f9139e2711c3313b668b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "bcac7f3e-9dbe-4de9-bb3b-b73fa45e1abc", "comment": "Malware payload (Mirai)", "value": "811f769367d4e028dafcf6a72dc48e5e492203546cef1bca3a9f51305de0c776", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "11341751-8f4a-4739-b269-787ecbf8fe01", "value": "T18E937D65C2F49C84C1244EB8769C9F7D9703F90166632EF2D28AC6BE90479F8B6903", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "4dbaab4a-340b-49ef-b5a5-f6c6271d80a6", "value": "1536:ZZ+aHEYBx/KcgvcN+7OvHhlnbrMk5+RbD3A0NKHkpZ91GQcC7Qed1J:Zj3McNJbR+RDw0UHusQc4l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127733, "uuid": "4e2c4518-d75a-4f7f-bbed-dd3b5033cbe4", "value": 95424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "6c70103c-ba0c-46ff-b87d-6cb1ca96b126", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "047dfed4-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "4d110dda-3715-4ebf-a6c3-fa922160d368", "comment": "Malware payload (Mirai)", "value": "006e3e4c36ba20f562285d0044506593", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "47bdb8d8-3cd9-4e53-8e80-984ede97bd01", "comment": "Malware payload (Mirai)", "value": "640274ff5590d8a0af04d3e062ac2a7757227a3b9d08df1aa96ef196edda5ad1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "3d4b4cd5-5533-4670-9436-2e80a550af4b", "value": "T1E8A33906BAC188FDC495E57807BF7272C561F03C2276728723C4FF297A1DE611A9E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "83237341-2d60-40fd-b6a0-551ba08b39cf", "value": "1536:YxL0eOj0jqcMKP4yaGekhHFossyUnYUYdnuN4tf+Om1CVl+20Yqe0qCy2oeXoXnF:YxLOj0jqy3FnuN4tfM1Cq20YqYCy2NW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127733, "uuid": "82b0e1f5-c352-402d-b6c7-13496c9abbef", "value": 101088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127733, "uuid": "0340dbd4-1b7c-43c9-b17d-e05cacc805ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04aa7af3-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127734, "uuid": "2e37a79d-ff50-4238-8ea6-5463a29c20cd", "comment": "Malware payload", "value": "5087b6e6fc46ad4c3fa985ad436bad30", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127734, "uuid": "3885c53e-3018-469e-8217-a6296af2d260", "comment": "Malware payload", "value": "b9f27c94d257379b0a886dc0713e3d7f3e23ecbeaa2b37c0cf98d03faa23fd4d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127734, "uuid": "e8f12566-75f8-46ee-bb19-1ac2338372da", "value": "T1A7A42397E39996EC88C47ABA8B2C0D18B27CE7745CCF06A8537E5335D1688A29E035", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127734, "uuid": "a82ba423-a078-42f4-bb07-a145999722cf", "value": "12288:CsS5lyFd64+6sVXkvgSe5yKqr++rVOje+yH5Q:Csgx56sSvPRy+6eTH5Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127734, "uuid": "4494036e-1016-485c-b099-1932fbb47b37", "value": 492541, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127734, "uuid": "b28f5334-4720-44e4-8c10-044cc2cb3962", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1abb31e7-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127771, "uuid": "28109ec2-ad51-4dc5-bb43-4f74a00100f1", "comment": "Malware payload (Mirai)", "value": "a0af41ec8f0002df308a2204c85c86b6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127771, "uuid": "3a3e4c95-821c-4da4-87bf-86e03728e320", "comment": "Malware payload (Mirai)", "value": "6dc04c163a1374d4bc760422bec10476fa05690d810198578c7a287fe6089c14", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127771, "uuid": "d72b03c7-d53c-4534-97d1-f63eedf49233", "value": "T19A31A4BFA2F040F3C4029D42FB95A6C5E5CC46D262E5EFB874BC45B2485C58CB9A5E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127771, "uuid": "3137cc47-936a-46c4-b80a-24361af99526", "value": "12:Hf2Gie7ee/ZR87EZR+s5BNxoNIh2zNIhyDu6aNCDu6abLDmHb5nb6w7SG:HOJ1bkBHoNI4NIkKPsKPbvmH5jT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127771, "uuid": "b8f09548-b336-4cbf-acd4-a82ef5b6486a", "value": 1450, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127771, "uuid": "1fdf0536-4889-452f-8e8d-914edd4c317d", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ae54f4f-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127771, "uuid": "8536b26b-8c85-4883-a2e8-0b977068122c", "comment": "Malware payload (Mirai)", "value": "be9d8a44049969b1d344c7581192b5be", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127771, "uuid": "8b9676aa-e9fc-492d-9b35-22150d43898e", "comment": "Malware payload (Mirai)", "value": "5cf82f5efab5b4b815ecae0f19125f0206a66f8ab5e373c24668ff440c38942f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127771, "uuid": "23148ccf-bf16-45c2-a142-ca1a7e4abef8", "value": "T1E34163D924315333C00A9DCEF6905A9DEAC651F4B1C7650FD69D1EB738AC450B8A2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127771, "uuid": "e85fd38c-ccb9-4ce4-92bb-64541ab93114", "value": "24:IVcl3XQQFG9dBhF3yNdDBoDuEDCucwVcEErTBEyuKkJ7kr9h:OAoi+9CBVGwv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127771, "uuid": "177a63e4-dbfd-4157-bb26-b3a9d4b24dcc", "value": 2133, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127771, "uuid": "8338be7e-32e4-402a-a5d4-e6b3e72099e1", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1af49e51-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127771, "uuid": "79561f46-5710-44de-893c-09814a868f24", "comment": "Malware payload (Mirai)", "value": "5dd543e01e3b053488004c33eaa4bee3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127771, "uuid": "1d507ad0-3744-46d7-996b-073b4c25d759", "comment": "Malware payload (Mirai)", "value": "126874047f95db45e05e45451ed0b6063ad2f2309090b6fb854c8d1cba5bc15b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127771, "uuid": "11e4af9b-3e4c-4a33-bc72-faa823520967", "value": "T18823F1AF8C20C253D15AA87D8FAB4D7194A16DA37D1EB06C6CC07189E74817F8E5FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127771, "uuid": "92b48bc7-3cbd-4802-b4cb-7c5f6e265361", "value": "768:ZgLLZ9IHzi+tFaPFZgIYcUX2f8DZHUq5JoWssRQltkyjCDyVFcMrleAXrR7550:ZOIHu9FZgqUK8y44fkUCmcwIAXr5550", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127771, "uuid": "62870236-38c4-4cca-96c8-8dd096ae61d2", "value": 49744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127771, "uuid": "2a568e80-3773-4965-a2d8-d89854a249d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b815945-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127772, "uuid": "9bb312a5-59c7-4fb0-9cbd-1e9869edde89", "comment": "Malware payload", "value": "6ee1880b6557058d920f0909357f2cc5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127772, "uuid": "9704e85b-b26a-42e5-a194-9d0a14a2e5d2", "comment": "Malware payload", "value": "c12e611a6e2c6c89be0c2b70fde4bfe948e10d47651d6198769453d095ce7ddc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127772, "uuid": "9d94cf59-e2b5-48a8-af6d-cd9a467f9f05", "value": "T1D5C423046806D1EE83D23B6DB24047A0BE7A50D7F70DB2041A9E7AD17DE967077E8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127772, "uuid": "26f41e76-1773-489f-ad50-b046f90b7342", "value": "12288:QjXIfpqn5w6wlOMWROC/FTeHo22Qm7NzofOrAHmh:gIfoe4MQOC/gHozN7NzomM4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127772, "uuid": "bc657d54-7401-41f6-b86f-ef51b6b76d1a", "value": 578961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127772, "uuid": "821ea022-1433-49ec-823d-ddc9557548ce", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b83de64-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127772, "uuid": "c48c45d8-c12e-4949-b342-df90ae347a3e", "comment": "Malware payload", "value": "9e68cbbc57c4485ea48908ca1189fba2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127772, "uuid": "10cc5da8-c0ba-4a7a-ba45-9e8be19f1fa3", "comment": "Malware payload", "value": "7d3548dedff479b513406e378d1cf8b82b208f11d5f4203c1d8ac4895ce7497d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127772, "uuid": "7948f0b1-a219-48de-a305-1e8dc5b79513", "value": "T18BC423E3B353380F98FA02C2A9E22E89253DCFCC6157A93D897A0119B36D7775C9C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127772, "uuid": "1889fc4b-1cc6-4622-9247-ccd9c76ce978", "value": "12288:WwU7xz8BpJEZStUHC9j+2v/BfUbiJh/ZimKRkoeUbG8G9rkmya9d15Duy5y/:Wj7xQBEZzWCY/ubsimhQ0bd15Duy6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127772, "uuid": "3bf59874-2808-4eb5-b6d8-cffcaa9fd6e7", "value": 545251, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127772, "uuid": "2f7a72d0-4ea3-454f-9deb-a62a48afc04c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bcbdf93-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127772, "uuid": "78097d05-3190-4c59-869b-d3d0ab53613b", "comment": "Malware payload", "value": "5b193cda1fd34e6bdfffa4913999ce97", "object_relation": "md5", "Tag": [ { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127772, "uuid": "c5407bfd-f57c-4b79-b53a-85dced994817", "comment": "Malware payload", "value": "343f24b9c3fbd725f8ebb9bfbc1fb507e9c8cad3be3a8e2b4379ceb34c90cb97", "object_relation": "sha256", "Tag": [ { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127772, "uuid": "d541508f-bafc-497c-bec2-9546290b4edc", "value": "T1096423D4A7110FCDDDF429B8606B480636ECBE53B39B4E5CA3DBA18B21B11E541253", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127772, "uuid": "b597cd7d-f90a-43ac-9b78-7872e35eb5f0", "value": "6144:k/FjYmdXkR6dnjg2Ln38BNBSXITQAI/dC3YRqcZh5/zcVFr0p877SAkHbFRFrAZE:k/5YGX7njggMBNlT4dC3YRVzQVFr0p+2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127772, "uuid": "93770d7e-f7f0-4af9-8bce-1fb5d4414491", "value": 306864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127772, "uuid": "a4c3eb3e-8426-4ff8-ac5e-421fb4a7d3e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c0005af-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127773, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127773, "uuid": "747eb333-3b24-4dfe-9074-590c6b88b269", "comment": "Malware payload", "value": "2782f44399886a5522fc90b800e1ec04", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127773, "uuid": "bb25572d-b5b3-426b-a301-61e8b6ab76bf", "comment": "Malware payload", "value": "81a3943bd9c8f6e4528928b6770311b4608042ee6de761735fc11f48aa07168e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127773, "uuid": "7302127f-7e4d-4443-be5f-00e40f76c5a0", "value": "T1CCC42304680691EE83D23B6DB34047A0BE7A50D7F70DB2041ADE7AD17DE967077E8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127773, "uuid": "dc2eb243-7191-44e4-b361-361ed61f5c86", "value": "12288:sjXIfpqn5c6wlOMWROC/FTeHo22Qm7NzofOrAHmB:0Ifou4MQOC/gHozN7NzomMc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127773, "uuid": "51b7b9ac-167f-4fa9-bd3a-fa8d866aaf41", "value": 578961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127773, "uuid": "95fd9cb8-ed9f-4542-b61a-5df8f29b4771", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c1a02a3-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127773, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127773, "uuid": "75c9774a-1cef-4ce8-af46-229c678e9d4c", "comment": "Malware payload", "value": "eb678e11a8cd4c44e0ea62644e008d52", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127773, "uuid": "a0cf0968-255d-45fc-83e7-50341e238c2f", "comment": "Malware payload", "value": "0949daa14d55737bf630a1a4dcff6b7b07049bd211a46c051baedf20af0f9b63", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127773, "uuid": "5af6276c-df9d-4339-b957-10cf68e9c14a", "value": "T1AAC423046806D1EE83D23B6DB24047A0BE7A50D7F70DB2041A9E7AD17DE967077E8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127773, "uuid": "dc906b9a-8e90-407c-b53a-f077db9bf548", "value": "12288:ejXIfpqn576wlOMWROC/FTeHo22Qm7NzofOrAHmI:yIfot4MQOC/gHozN7NzomMx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127773, "uuid": "0f68701e-4400-4b77-b829-b9fc4442d6fa", "value": 578961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127773, "uuid": "86cac289-9273-4315-9e7a-854cb9837045", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c92bef9-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127774, "uuid": "0247663a-b859-4b45-851e-9cfcbe7c761c", "comment": "Malware payload", "value": "3543943ba828533a0f205a13046ce8f9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127774, "uuid": "c89ad8cc-3bf6-4175-8446-8a954b4de028", "comment": "Malware payload", "value": "75c49cac3e186e6e8c33de8e8d26c0fcc24747fda6f38fddac1cb409ba5cf7a3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127774, "uuid": "422139ca-f728-420c-93e2-6566e046965c", "value": "T1B2A42397E39996EC8CC47ABA8B2C0D08B27CE7745CCF06A8537E5335D1688A39E075", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127774, "uuid": "fac6e305-50d3-469f-be5e-bd03bc4c8c58", "value": "12288:asS5lyFd6A+6sVXkvgSe5y+qr++rVOje+yH50:asgxR6sSvPFy+6eTH50", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127774, "uuid": "b9de188d-ad8c-4d24-9403-5c39636e44cd", "value": 492541, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127774, "uuid": "5289e6c0-7979-42a4-ab4e-d2714eae1fc1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c9a2b7d-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127774, "uuid": "f9ecd2f0-89c0-4819-b063-61287137b62e", "comment": "Malware payload", "value": "c293810b0fe7aedbaa40310c38c0c276", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127774, "uuid": "ee730552-8f36-4150-a2b9-ad94580a2ad4", "comment": "Malware payload", "value": "0e95d71dd1708908d356d1fa541d4111cdccd1220d1d8742bfca33801b030d39", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127774, "uuid": "4036a023-f367-47ee-a204-96c690f1becd", "value": "T127C4231604CD4AE1C0D382FA176746F5049A4E38EF929A7EC43C34C9E340D79FB296", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127774, "uuid": "28895490-1136-4463-8b2d-342293b2ec19", "value": "12288:j56zQTBL8mLpZmA4C+9NgOZTUqnMmzDF+nuwsQab/YpUiyCs6ZHfipRwSb1eBF:4MTBL8SpD8NQqMm3FSuvdiyCJiMSb1u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127774, "uuid": "c803302f-35d7-4093-8489-4edacf91b31b", "value": 579945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127774, "uuid": "75fee239-18ef-4289-b65b-82e28f6526c3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce2a68c-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1777127774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127774, "uuid": "e16fa58d-2387-4e6f-a252-58028e172017", "comment": "Malware payload (NetSupport)", "value": "ba1a135c6b264cf1bbec6f79134ca8a5", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127774, "uuid": "65149349-6ea4-4c82-913a-19641657f71c", "comment": "Malware payload (NetSupport)", "value": "46b7a1b85bcfcf536e6b479a6347150770021839664b1f03117db8a7d22771d3", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127774, "uuid": "0ee7380d-ac97-4625-adb7-706794c5535d", "value": "T1D5B5330F764599EAE0EA67B9154F97E31383AC09113003A5FE5EF46C0832F12A577B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127774, "uuid": "330fcc90-4123-4c63-89b7-39db9bc4eb91", "value": "49152:+hBR3kT3c9Db5Fh1iCfq5jk5uN/m7o08z:+B/95H1iCfq5A5uN/m008z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127774, "uuid": "7a9e0c2d-5827-4a18-8bd8-f4fa5cb07612", "value": 2306048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127774, "uuid": "78812135-963b-4704-a223-fab58b2b5b47", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d0d76c5-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127775, "uuid": "e6fb69f1-94c6-4ac4-a6cd-ed3683c7cfc8", "comment": "Malware payload", "value": "eeea268e96b1f832b2f4678e308c37bd", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127775, "uuid": "e0a79ee9-9eec-4605-901b-24ddf25e7501", "comment": "Malware payload", "value": "d755cf199d8399fdc6a7f1b9d62136853b12566332ba37501afc18f914512fd3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127775, "uuid": "e2e2440c-3de6-4618-a947-4a59ca38fce6", "value": "T168C423195942D2CE83D43F7E8EC0BBA03E7990EBEB0DFA0416DA35917C95251B3D49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127775, "uuid": "47ac5e8a-7cac-4ba6-a66f-a9b69538a3b3", "value": "12288:UdevMEkFmHkd6wlOMWROC/FTeHo22Qm7NzofOrAHmZ:gemh4MQOC/gHozN7NzomMM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127775, "uuid": "47ebebc1-10d4-43ea-8d1f-443aa625aeb5", "value": 585382, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127775, "uuid": "0243a24f-fcc0-42a5-9c5f-5aef6a87dd89", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d101462-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127775, "uuid": "b823b25e-b531-4d07-9aea-eb8bfc9a774d", "comment": "Malware payload", "value": "dd34da85bc3f163d0d0611d192bb23f2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127775, "uuid": "fd33fbff-00ce-4074-8381-591eeb71d68e", "comment": "Malware payload", "value": "050ffe24c8e8ee4bea0bcfb6bc4c1a394df6b5d5a7fd860ccdbcd86d95da5c52", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127775, "uuid": "77d07ae0-5c06-420e-8ab5-6c423e19104c", "value": "T1C4C423046806D1EE83D23B6DB24047A0BE7A50D7F70DB2041A9E7AD17DE967077E8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127775, "uuid": "f7e36013-96b5-4ea8-92d4-0c52229c9c37", "value": "12288:8jXIfpqn5K6wlOMWROC/FTeHo22Qm7NzofOrAHmH:EIfo44MQOC/gHozN7NzomMe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127775, "uuid": "a5152316-5e8e-4779-85a5-4c86be1297c4", "value": 578961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127775, "uuid": "e0f02344-d337-4359-8724-7e04abac9419", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d6aab73-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127775, "uuid": "a11cb7e9-6494-4907-a2a2-af769f6d4bc4", "comment": "Malware payload", "value": "8463a318ab2112926e477f0735924995", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127775, "uuid": "647d45d2-a83a-4421-9108-95fcae72997f", "comment": "Malware payload", "value": "6ebd332226816aadf297156ee83eb6954d108d4f9223181bdb82f2d43e8d3bf0", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127775, "uuid": "ee24bc01-617e-48ae-b236-38976aac129f", "value": "T106C423195942D2CD83D43F7E8EC0BBA03E7990EBEB0DFA0416DA36917C95261B3D49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127775, "uuid": "5b51de28-b22e-4817-afa1-c0d2f2d2a6d9", "value": "12288:EdevMEkFmHkx6wlOMWROC/FTeHo22Qm7NzofOrAHmN:QemF4MQOC/gHozN7NzomMY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127775, "uuid": "6789934f-8a15-45b5-90d1-0840692356a1", "value": 585382, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127775, "uuid": "6c1dc017-999e-46d0-9630-4d8bb0237021", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dac6f05-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127776, "uuid": "fdb404c0-9791-4e3e-be30-a32dcd67d113", "comment": "Malware payload", "value": "1a9bd47786fa6fe7eb0311c735ad2195", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127776, "uuid": "6f037e0f-0d10-4c88-84f7-f54496df2fe4", "comment": "Malware payload", "value": "67fe89079fa6171d27d2a457b03d54849f19f2256f40853a91b91e5f2612f63d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127776, "uuid": "1511fbf4-47d1-4937-95de-cd02b4eff983", "value": "T1EDC423443901C1DD874A6F3E9DD44EB46E7D80E79A5A790027CEBE827D85AB033C9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127776, "uuid": "ad4c5180-632d-4f59-9bcb-8f8dc0a28a80", "value": "12288:hqwEDcCCXi6wlOMWROC/FTeHo22Qm7NzofOr/mShe:mgCCa4MQOC/gHozN7NzomLmV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127776, "uuid": "4851393c-ae2f-409a-a149-7df12c5c0a37", "value": 578949, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127776, "uuid": "a2333a18-ba10-4f3a-8ffd-2360dc7dec75", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dc9ab00-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127776, "uuid": "7629a71b-167c-4e1f-86b1-bde5450b8d55", "comment": "Malware payload", "value": "d95c7ba5dff19894de9cb5dabd77f9fa", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127776, "uuid": "aa15c155-d774-41b8-9234-298e8c903ad1", "comment": "Malware payload", "value": "43a6005e96d5b9bf2a6a4c638d71e4772b1009a1efa236da62f4e2e247fb2b89", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127776, "uuid": "cab88ef7-39c7-4972-9afc-127c14306e69", "value": "T103553389817C19C84F7D0B96B7FF865CB10A8EFC100218B36B5A44EB793D7DBC2645", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127776, "uuid": "053fee86-f169-4b0d-aa60-faca2aebadf9", "value": "24576:xPsS0kJQHhpjwoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRl:MkJQrwoZ9bq+MmMEL+hcjXHC/wnwdl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127776, "uuid": "0dd0b6c7-a785-4890-ab64-d65c487bd63c", "value": 1394813, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127776, "uuid": "94dc4630-b9eb-492d-bb95-62f7f7429d5a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dfe7393-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127776, "uuid": "6e627a2f-59ba-47be-8065-acb634df6e84", "comment": "Malware payload", "value": "77a5245968356e4428d43dea67b5837a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127776, "uuid": "421ef905-5c15-4c76-bca0-d6130f200c24", "comment": "Malware payload", "value": "b3fdae98bce7bde373b6d1a9967c0aaf7cf7696e285a3ad3889ad2a267407820", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127776, "uuid": "478d6f20-ba50-479d-a125-3a488a839e12", "value": "T121C423445C187B6C3AF6A0FD2AB65D83631E1DFAF0D23DBEA43484FE1C16264A1858", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127776, "uuid": "9a225d12-ec8b-4d69-990e-c628895636f1", "value": "12288:Ub7TqKR2IkSlQiALUMF2G5SLjrlFlU7ecTUNZhmbs2sYbl7d:a7fkSlQiAIMF2SSPrlFYTU3hVYbl7d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127776, "uuid": "6512013d-e4ec-43ac-90ed-75ff96b29be2", "value": 584990, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127776, "uuid": "eac35f51-6752-4c71-adae-243ef24a98ed", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e2f57d9-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127776, "uuid": "690c698d-6b8d-4b5b-bd99-9876fefb8a15", "comment": "Malware payload", "value": "14563c3a2116d6198fa2e8f8375bc9c2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127776, "uuid": "4ea3937c-6e9f-44d1-8700-e04a48979660", "comment": "Malware payload", "value": "af04ec5440534ef233f55930529843904f3f443b70f55e3c77888f7f402d33de", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127776, "uuid": "f219b9c8-7be4-48e8-8e44-40b8aea3af37", "value": "T183C42304680691EE83D23B6DB34047A0BE7A50D7F70DB2041ADE7AD17DE967077E8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127776, "uuid": "c9b979c6-7cc1-4655-be9b-83ed98fed960", "value": "12288:GjXIfpqn5p6wlOMWROC/FTeHo22Qm7NzofOrAHmK:qIfor4MQOC/gHozN7NzomMf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127776, "uuid": "d7dd0523-15aa-4072-8627-9ca5242f41d3", "value": 578961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127776, "uuid": "1bf71f0f-b4ec-4d24-92d0-34236715031a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e661fed-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127777, "uuid": "964399c6-965d-4879-932a-abafa4b51b94", "comment": "Malware payload", "value": "6920024943508283216c3aa3cfd3ec1e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127777, "uuid": "32092b28-e45e-4418-9995-2d1a710f648b", "comment": "Malware payload", "value": "0b6563b1226b8b69e612e377682a2e174ae13a65af37bc2cc471387f4b961e48", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127777, "uuid": "5bedb6db-6e18-4ec5-830b-9d2ddee7736c", "value": "T135C423195942D2CE83D43F7E8EC0BBA03E7990EBEB0DFA0416DA35917C95261B3D49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127777, "uuid": "5ec23346-207f-412d-a4f8-be837b7864cd", "value": "12288:SdevMEkFmHko6wlOMWROC/FTeHo22Qm7NzofOrAHmO:+emk4MQOC/gHozN7NzomMr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127777, "uuid": "de09d22e-d4c4-4e67-a79e-9b97af9fa082", "value": 585382, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127777, "uuid": "4e0ffa76-7b8e-4abc-9f23-9c57b9cb432b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e660df6-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127777, "uuid": "2fe84fbf-e71f-48bf-a3de-eaa87d2cc48c", "comment": "Malware payload", "value": "35e28b8ee7adc4c585ae7615955a2a7e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127777, "uuid": "bfe57a90-6653-43a2-a528-625b83ebdaff", "comment": "Malware payload", "value": "5476f81ec0802c54bc4f8505e7580cee57fc95e310e0768d0fad9b414b5c37a9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127777, "uuid": "3a4959b8-7e13-4a93-995b-29992425bf24", "value": "T17DC423E3B353380F98FA02C2A9E22E89253DCFCC6157A93D897A0119B36D7775C9C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127777, "uuid": "a62cb927-f150-4ce0-bdf8-6aef7084dd4e", "value": "12288:SwU7xz8BpJEZStU3C9j+2v/BfUbiJh/ZimKRkoeUbG8G9rkmya9d15Duy5y7:Sj7xQBEZzmCY/ubsimhQ0bd15DuyG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127777, "uuid": "cc40d233-7b25-4ce8-a4c4-705d4f43620f", "value": 545251, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127777, "uuid": "2cb7c998-a7f2-47ad-b27e-bebf44d050c7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e891f70-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127777, "uuid": "b1a05fcf-cc83-447f-99ad-be7927e9b8c0", "comment": "Malware payload", "value": "4ed832a13714338a3fae2816f95859f9", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127777, "uuid": "2e51be7d-ec96-475c-8bba-05d9af78af4f", "comment": "Malware payload", "value": "31aa977cc6f008c2df3af34dfb9a5319bdda88362d1a7540f48995589e999696", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127777, "uuid": "6dad493d-5172-46af-a4b3-6b57fe750972", "value": "T110C42304680691EE83D23B6DB34047A0BE7A50D7F70DB2041ADE7AD17DE967077E8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127777, "uuid": "6aa90b32-49c8-4670-9970-bbd68f815e2a", "value": "12288:mjXIfpqn5/6wlOMWROC/FTeHo22Qm7NzofOrAHmc:KIfoB4MQOC/gHozN7NzomM5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127777, "uuid": "7450d7bf-ee2a-4b59-b172-9cfcc785bac1", "value": 578961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127777, "uuid": "42caa364-5550-4b39-8a66-cc5b90797a76", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e97e0ed-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127777, "uuid": "0eea13ab-bd66-4863-9752-d8ed3847e7f3", "comment": "Malware payload", "value": "d4eb0cca8cf5a40a8a3e11d07fdf4b46", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127777, "uuid": "6424ddcd-57dc-408a-a8bf-8edb7727052c", "comment": "Malware payload", "value": "84930f511312c2c33a706b8f44737ecbbd5895708ed987279e0c0e0a8b929a42", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127777, "uuid": "f66c5722-8034-47b5-a369-132221af513f", "value": "T1E655338A817C19C84F7D0B56B7FF865CB10A8EFC100218B32B5A44EB793D7DBC2645", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127777, "uuid": "50cf8770-38b5-4fa6-9510-e7890ee6cac6", "value": "24576:SPsS0kJQHhpjmoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRW:FkJQrmoZ9bq+MmMEL+hcjXHC/wnwdW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127777, "uuid": "b10e8475-fb7e-4e3a-a238-9b59956350ae", "value": 1394813, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127777, "uuid": "9d574244-256e-41a8-bdbb-f260adc2580d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e9755bc-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127777, "uuid": "0449e4f3-3935-48a0-b231-b6ab87a5fcf2", "comment": "Malware payload", "value": "23e0b47adff32e37619d5b9fd2cf469a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127777, "uuid": "2222b459-4a1a-4007-83f9-3e7dd79638a2", "comment": "Malware payload", "value": "d70d22d940ce67b08a8e0f26dee7b64d6f0b955773e1fd8f7e6e1c6bf932e02c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127777, "uuid": "cbdb8066-441d-41cd-a0e0-80334bb21941", "value": "T11AC4231DB0547B51F64B6A78B323CDB08B29D03FD219C388A0840B399B5BE5B69CD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127777, "uuid": "943dfc2f-041b-4d46-88cd-afc33b69d013", "value": "12288:GMU+0xq75aS9iYIp6cP/G2Bku6zXLTHXP427bO:2+J71vI/GzX3ftHO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127777, "uuid": "c53627cb-cdb9-429b-92f2-2c3013cdc7cd", "value": 587431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127777, "uuid": "1eb63c13-5602-4c20-9521-430f5b624e2a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f2031b9-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127778, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127778, "uuid": "e4c6296c-8355-441c-9504-8a308b2c9ce8", "comment": "Malware payload", "value": "675f1dd985f73e3072f2ef2963c9fa27", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127778, "uuid": "4890313f-9199-4f82-8aec-97e97c1d8514", "comment": "Malware payload", "value": "5b60fb370080b5eea4aa15524b2c1c8461f76c314c63f1858fb5aed4611d55a6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127778, "uuid": "30dffb62-73b9-4d5a-8064-e3df6fc906cb", "value": "T1A7C42304680691EE83D23B6DB34047A0BE7A50D7F70DB20416DE7AD1BDE967077E8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127778, "uuid": "0cc472ec-0a6b-4880-8ca0-5e32c08d7608", "value": "12288:gjXIfpqn5i6wlOMWROC/FTeHo22Qm7NzofOrAHmr:wIfoc4MQOC/gHozN7NzomMa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127778, "uuid": "44e22172-b4f2-4f52-8ea4-2c72848e31f4", "value": 578961, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127778, "uuid": "8f3468a2-87be-42ac-8a02-b62da84f9d88", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f47720c-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127778, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127778, "uuid": "6fd10fcb-af9d-4e59-9628-f3acd2a89bd9", "comment": "Malware payload", "value": "300faca5d5e10406066f5e6be675a428", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127778, "uuid": "784ef2e4-bbb1-4a05-b7db-5241001cc731", "comment": "Malware payload", "value": "e3b94c9dfe1d19a4ac571910f4ec3fcd558c4ccd94c6a721070e48099478eab6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127778, "uuid": "f07fdad1-fd91-409a-a545-33eeee43702b", "value": "T136A42397E39996EC8CC47ABA8B2C0D08B27CE7745CCF06A8537E5335D1688A39E035", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127778, "uuid": "507445d6-9fea-4f8f-818e-39e755d30774", "value": "12288:KsS5lyFd64+6sVXkvgSe5yiqr++rVOje+yH5I:Ksgx56sSvPZy+6eTH5I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127778, "uuid": "602ca836-6cff-4b6f-bc59-75443c0536ba", "value": 492541, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127778, "uuid": "05cefe0f-6a7e-4b40-a61f-cb1deddbd117", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f87fd09-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127779, "uuid": "0ccb1d5c-2d46-4db8-8edb-4a9cb9f7ebf2", "comment": "Malware payload", "value": "3bcb889515a3180f2592b675b4cd88c4", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127779, "uuid": "6a116f81-a932-4f9a-b5c4-96641e3bed51", "comment": "Malware payload", "value": "6450de0952321551eae5ff1014aaf81d2bf354829a58ac6e706034629a889b86", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127779, "uuid": "c90293e6-e304-4fe5-9b28-4d94b0127824", "value": "T10455338A817C19C84F7D0B56B7FF865CB10A8EFC100218B32B5A44EB793D7DBC2645", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127779, "uuid": "47cafd87-c1c6-4d31-901e-835d607c2b62", "value": "24576:gPsS0kJQHhpj+oZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRI:/kJQr+oZ9bq+MmMEL+hcjXHC/wnwdI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127779, "uuid": "413f2851-14b8-45cc-b6ad-638b580152a4", "value": 1394813, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127779, "uuid": "9ca9f170-e51d-402d-a8d1-c7c77a7af8f5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e44d18a-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127857, "uuid": "bde1d7c1-4b6a-4c3b-8179-586255d63037", "comment": "Malware payload (Mirai)", "value": "088d64f097348d5e6ede4f1134bca8a2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127857, "uuid": "1207c787-466d-42fe-9f11-ea1f7eee4da4", "comment": "Malware payload (Mirai)", "value": "2db7353e5013f9223f605f9983c696a5270c3bb84d3a304bce61c9ca46d1dede", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127857, "uuid": "7c15a9be-159b-4291-9d43-b5b2626e3377", "value": "T10C839E63D9352DA4D4E849B0B4B18F7D0B63E454829B6EFB49A6C6778083F9CF2053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127857, "uuid": "55bc457c-11ad-46ed-902c-47e283640911", "value": "1536:JoqTDOxkaoTEqUDhllaNhofKMr8NuJ6fCGB7w6Vyuw:JoqTKxhoT4DUfoCMJJ6f7tzw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127857, "uuid": "5cdf8ae9-17fe-41b9-b266-23006c58087c", "value": 83803, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127857, "uuid": "40f34102-5097-47ff-bacc-fa9458bcfccd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e687b4b-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127857, "uuid": "1c8d1f29-1eb7-4fe2-a95a-18766d47dee6", "comment": "Malware payload (Mirai)", "value": "92ac6159875e563095df510a4a582c82", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127857, "uuid": "6e57db08-facc-4ce3-b3d4-d78cfa2e5d56", "comment": "Malware payload (Mirai)", "value": "54b492f5881437245345f1f917db28c3dbebed5aa746dcfb8c177a9fc038718a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127857, "uuid": "d74b0551-06fe-4362-adcc-fe124ab96719", "value": "T10C91E7CD126293613C3FAC337ED94F487281C6621194AF90B9C9FCF5878CD3B5969A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127857, "uuid": "a61c448c-f63f-4925-bf79-241e01b8bb23", "value": "24:vXx7fx7QwtfXx7Ax7TNBfXx70+x70dafXx73x7oWfXx7Gx7lhJ1fXx7K+x7Kd4fW:vH1W6vSxqNxu8jBGZxT3M0d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127857, "uuid": "77e09d38-0cab-4061-b7da-553d5ba237c1", "value": 4470, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127857, "uuid": "93d9af18-07c8-4d35-af9b-cbea869b3640", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ec9d234-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127858, "uuid": "9e561304-6aa8-41ea-bc95-d1ee7a5d04e8", "comment": "Malware payload (Mirai)", "value": "c069f3bd6fb07f9829f2d4d96b33638b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127858, "uuid": "d81402d3-e250-443c-ad93-8e163ea51203", "comment": "Malware payload (Mirai)", "value": "b77eeb4a9fbf9a7724647d7474615ea59c27efcdc3bf2e1896b5ca66ffa155a4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127858, "uuid": "b47b93d7-4870-4bc2-9ce2-870d44157b7c", "value": "T129A35B8BF415ED7DF80ED77B40670A06B670A3A10A830F366267B957EC361D81926F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127858, "uuid": "408c2f30-b7d9-4cf5-b8ce-5f85a57fc2b0", "value": "1536:xYp+qJ3a+sJZrgn17Z5gt7TsMZGWgKrh8IxAkOsPX5r69KJz2f6FzUH6OH8BWT:x/+sJZ61dANZZgKroyrUKZ6H6OHmWT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127858, "uuid": "b5d93e39-f8ee-436d-8a87-5375e2be4f5e", "value": 103299, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127858, "uuid": "d71b6efa-845e-4671-a68e-3142a57bc082", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4edf205a-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127858, "uuid": "b998f5c6-e22a-4138-8d64-dcb4b962a9b4", "comment": "Malware payload", "value": "fa2374d866a40c566820675d7e82aa0f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127858, "uuid": "31102b03-d4d3-4fa4-9f9d-10c1773b12a4", "comment": "Malware payload", "value": "b3fe63898ccdc75cde2bf0b84283fe1ea4437b0d931cf1d2639a363e0629ba0e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127858, "uuid": "ed148b4d-dd79-419b-bee4-62cdbe90f128", "value": "T15FC423445C187B6C3AF6A0FD2AB65D83631E1DFAF0D23DBEA43484FE1C16264A1858", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127858, "uuid": "ae552d52-6660-494e-998a-0f68bf34189d", "value": "12288:0b7TqKR2IkSlQMALUMF2G5SLjrlFlU7ecTUNZhmbs2sYbl7P:67fkSlQMAIMF2SSPrlFYTU3hVYbl7P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127858, "uuid": "319375d8-ffd5-4e01-9d5a-692e317748ad", "value": 584990, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127858, "uuid": "5d903835-dcb0-4b4b-808b-ac38716ccee7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f5a62e0-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "b5162f08-1716-4731-a468-2ebb71e6127e", "comment": "Malware payload (Mirai)", "value": "54b276d5079abcf0ac9be6ef971abcd6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "14ea7f91-e863-44e2-8505-63f3df741d7b", "comment": "Malware payload (Mirai)", "value": "1b11eca1b73599feb999dac54ba70d9574e4148fea8314043bee3377c76edffc", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "e9b474dd-db7d-4977-8adb-31b65157808b", "value": "T1B8130248492BC135DB140832E97A48CA73ED2B77B9C5FC2BF9140259BB82D5399F4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "5d0335af-714a-478f-8d32-a4cd535244a0", "value": "768:vOAK0CsbcvOBH/WZ0yb3wmTDfT1IX+W2Rj+A3l7O+MK9q3UELQ9i:vOADf0OBH/WZ0y7NfG+x+AgLqi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127859, "uuid": "f2f90cd0-ee71-494e-a77e-8178c5da0a18", "value": 44379, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "7b3941d2-2c06-4bf5-9638-2f951ef3eb1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f5900e0-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "a537509f-33c7-4c3c-bb5d-1b87c9d7fa4a", "comment": "Malware payload", "value": "8be017c04f02ab282c64d44ba28d6ac5", "object_relation": "md5", "Tag": [ { "name": "wraith-scan", "colour": "#786c14", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "46c407a4-4517-4d4b-8c5e-15f56dd5befb", "comment": "Malware payload", "value": "34287eef2aa02bbe37972077b489355e664ab69eb72dfc684584af0e192fcc52", "object_relation": "sha256", "Tag": [ { "name": "wraith-scan", "colour": "#786c14", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "437e0486-0471-4f3f-a0e8-e4cfdd811aec", "value": "T138864B137A29EB0FC62821305CB2CA942B691C9642D7911BB745F309F9F21BD5DAEC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "7002d399-9ca3-4cc4-928a-f80d3fc9ed7f", "value": "49152:Kih3vrHa3TGZmwlzbIU0M/toT5TNGnDTt6DWO+bM1YETgHbVlrQJc0Nr8ia5pp07:2KtSi/VbiQ0fblOtT6adGnUjEZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127859, "uuid": "323f0312-9acb-481e-974f-0b8a66c883a3", "value": 8126679, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "da452edc-a8c3-4a0e-acbf-ed1fffd23f60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f78917b-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "9df8e721-3e05-43e4-b9b9-20e6920997ab", "comment": "Malware payload (Mirai)", "value": "23c2359721cdbcb40e4d63a6b9cd004a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "0b495b5c-87c6-4bb1-a75e-55b40ea093bc", "comment": "Malware payload (Mirai)", "value": "24696ac8a9b936bbf8ad744eee7038e013cbd9e256b430a36a1965e457ab250d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "065ef2c3-e8f2-4d2b-ae86-596dac6a8f31", "value": "T178630210084364A3DC71E975BC46810A5DB6DA48FAFF70119899171CFED8782E9E3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "e5ce3e4f-727a-4b8e-ac32-896981f73540", "value": "1536:Lfvn8fm7yHElFzN9+X5LVaRmFvQwkLDbCxMFnwLaWBmyPTdVb743:Lfv8f8llpN9+pLVWmFvxkLDyinwLaW8T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127859, "uuid": "ba49a8d5-6eb8-483b-84ea-240c29d4f6cd", "value": 68175, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "35d134a5-be57-45fc-b355-a9ebd8129aa1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f95b4cc-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "53899726-0c31-4cbd-9443-4e04906e92e6", "comment": "Malware payload (Mirai)", "value": "9382bfc8a3b8eb7bbd2dd9f016829d29", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "a824aaf5-c19e-4823-b4f9-bf8f34ebdbcb", "comment": "Malware payload (Mirai)", "value": "0ba349e75d721e9a8955f2af5a9b5001d8a710db42c80cb9906b21b878e00a54", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "40e1d9fe-a3c1-4d15-ae5a-0e397ccba194", "value": "T16EB34A12EA3D592BC1D8A17712B7C222F1F6634D20A48A1D7E750F8EFF24344365B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "668dec76-ff3b-4674-a351-f1cb6cf43100", "value": "1536:wIq7VDQz/TQokRFjlc3d0l0aTAgh/EGtV8UcjT5LpOt09r2:wIq7VDQz7Qokzeel0aUgh/EAKljN12", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127859, "uuid": "050c338a-6432-459d-bb7f-fbce8fd19c66", "value": 109020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "a1b10356-50ab-426a-a927-aa389b547eb1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f9b99d8-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "88cd2002-c9cb-4b27-85db-561527209748", "comment": "Malware payload", "value": "8cf331b94f58db35fa6e9b493cd2eb4e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "818c01a5-2453-4e6a-b3bf-1d18d3a28e75", "comment": "Malware payload", "value": "dffbf36e9d94c0c785a24f464d6085c7d152ff97a9ba6d3e4173cdfc2f4c2a8b", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "73947c0a-6e32-4499-b6aa-80b24339ec57", "value": "T1D7B423F5A7606BCC9D20522F2F4A2BCF19274B41B403C54A1AD2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "de81d76c-5586-4f45-8de5-2b0ba44585c8", "value": "12288:CBRdpQ73iBVYW+CwvEXgbvM0a4OTHiQIIFzuK9Gd9IU9:CHUw2Wv9XgbM0azTHiQIouDR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127859, "uuid": "0723cd15-e2d6-48cf-8de6-45cd67078eeb", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "f0e39bfa-c273-43cb-af2a-f345e12e8bb0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f9b9c27-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "e90533f6-dd17-4de2-b24a-4b57d66d059e", "comment": "Malware payload (Mirai)", "value": "c3d81873460d44bfa3a346833eecbb14", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "e098db44-3e55-4191-8539-50e9e09673bf", "comment": "Malware payload (Mirai)", "value": "a3b2902feee9e5b31f8d180f25795bcecbe9ca4eb15eb9eb585247a1d3196f6a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "ee55018d-2f0c-40e3-be9e-dbe32dc479d8", "value": "T1EED3930ABFA02EF7E8AFDD3746E92B45208C651B21987F75B934D414F24A64F24D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "c6fb1fdb-8b93-492a-a771-4ef10195c2a7", "value": "1536:lAwUOWrTlvge18s1PGR76breXZJBHJD9h5kuHlpLBizcbBHCAMv3:WOwvl18s1PesrCZR9h7Bizn7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127859, "uuid": "0f61d356-68f2-427f-a84a-ac887c0f19c8", "value": 137880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "d86197dc-4811-4d38-8833-5f11e80b2348", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f9e8b7f-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "2c7b034c-28ff-4860-85c8-a3b90ada20fd", "comment": "Malware payload", "value": "0b29afee90da0f666cc6e83f3198035f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "c812efd2-acf4-4fe0-9709-1985702dbe04", "comment": "Malware payload", "value": "8fe111a03b592ea4c08f42d107005826839b29875278f98470657001bfb20b66", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "9fe29f95-aafa-4801-8332-40000bcb28ae", "value": "T176C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "efcca9da-ed0a-4f76-9e0b-c2b57fff49f0", "value": "12288:3+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2byjH9I1P0QKw6FEb:3+QqldA/TSO713u7xnjH9IaQKHq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127859, "uuid": "71e686cd-399e-4cd9-91a2-a6110ed49197", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "58104da5-9482-49ee-be2f-4f91ea910e3e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4fa8ef91-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "95230411-4afc-4b52-ac5e-7fc6f104359c", "comment": "Malware payload (Mirai)", "value": "0942f0e5e7f48f5eba3089d763a21851", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "3668e3af-dfd9-4333-bfed-8908096e44d9", "comment": "Malware payload (Mirai)", "value": "366bd86babc71ed14dfbcf90ee1c1d5a3a66f24679d59b3540a92239c370d39c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "236901de-56d9-4a95-9143-1e4dd31374e4", "value": "T1DD043B46EA409A13C0C72776EA9F414A3323A798D3E733069D186FF43F8765E4E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "04a853cf-fece-4362-842f-9fa1d04d7cee", "value": "3072:U8b6HMqaAWAm21i2PmukdkaYHXclViql/sDuw0a8GjXpM/9zXYj1PBes:UBsxAPDxKkaYHXclVtl/oF8GjZM/9ts", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127859, "uuid": "2b4c8e80-2568-46d6-886c-d29a0c7afba1", "value": 189804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127859, "uuid": "2917e5ba-3673-4c7f-9bdd-87dfc1c5ba4c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5010d72e-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127860, "uuid": "2b2cebb6-d25b-4808-8849-64736000e0cf", "comment": "Malware payload", "value": "8f39d697b7bdeab151a6e71e72deca66", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127860, "uuid": "3cc1b954-8aad-47b7-9fe9-39d1fb7d327c", "comment": "Malware payload", "value": "aba5eda9ef4f22ddbe0bc2e8157a69eb8da57fd7f7035d172a8cba78434fa1aa", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127860, "uuid": "a256a47f-8233-4f5a-8a36-e11b705082ae", "value": "T136C423443901C1DDC74A6F3A9D945EB46E7D80E79A5A790027CEBE827C85AB033C9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127860, "uuid": "73085a55-5dd0-4c39-87b4-69318f7bb4ce", "value": "12288:1qwEDcCCXB6wlOMWROC/FTeHo22Qm7NzofOr/mShz:CgCC94MQOC/gHozN7NzomLmk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127860, "uuid": "acf4a4ea-e68e-4d89-b133-79944cceda2b", "value": 578949, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127860, "uuid": "6f6b4740-a03f-42f9-ac37-834723fd140d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5011f8b6-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127860, "uuid": "227f40ad-59cf-41ee-959d-483b76be000e", "comment": "Malware payload", "value": "422529f1b603c4793d7040a3f166ddcd", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127860, "uuid": "09e5f176-4339-4c25-8ec8-9113d822e8be", "comment": "Malware payload", "value": "80f35bab348d2fd0bfeba37b6a8431a2c052d724d3441314b692f997df9a0aef", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127860, "uuid": "f714db3f-9ed4-49c3-9129-51820db40d72", "value": "T1FC3423ADD49498603D9964A7FD7AF23B382F29440537E06396F4C5B0E2AC787C3707", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127860, "uuid": "78830dc2-bf3f-4498-b4f2-e2acf18ba2cf", "value": "6144:hlPiwwldHR6IqwUdhc8j8/DNcxROAPriGcli1eG3l2x1vy:hlPIp0uZcarGc01TW16", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127860, "uuid": "e49e4704-4b82-4ffb-a5ac-720ad8195417", "value": 230785, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127860, "uuid": "463b712e-011b-4171-8e4e-61d6a82c737d", "value": "application/x-xar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50125ea1-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127860, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127860, "uuid": "85b61fa1-2b87-4ec2-88f4-a6d32cdb4ebc", "comment": "Malware payload", "value": "acff170a495d5721a1b81480e6039ad5", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127860, "uuid": "5c42e25a-4d15-4aff-90ef-da0b2b47554c", "comment": "Malware payload", "value": "82ccc6aa69207dcb6a8d8ce4945ceed8e69d544a1a581cea53b3dedec6d0c11e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127860, "uuid": "569f179c-137b-4cac-a5a0-55b587c0b0fb", "value": "T1A7C423443901C1DD874A6F3E9DD44EB46E7D80E79A5A790027CEBE827D85AB033C9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127860, "uuid": "483f1e98-2ce5-4b97-aa36-b6547ab629f9", "value": "12288:JqwEDcCCXf6wlOMWROC/FTeHo22Qm7NzofOr/mShJ:OgCCX4MQOC/gHozN7NzomLmC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127860, "uuid": "6e434f73-84dd-40e1-b9b3-6cdb75848636", "value": 578949, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127860, "uuid": "ec7ef5e0-ca5f-4e89-b865-31fa41ede346", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "506fde09-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127861, "uuid": "014826a3-7c2b-4edf-801c-23fd4de42c15", "comment": "Malware payload", "value": "d7e0ec6205c0f1891754d92aa582383f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127861, "uuid": "d590cf07-7300-46fb-8a92-91d375181d8a", "comment": "Malware payload", "value": "30ccc400fd4ea7b00807a9b2f8ac831a1b6170be50c051c1570702c6f08462b8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127861, "uuid": "1a762bc2-0029-4e8a-be40-a3c39f3d3669", "value": "T1D3553387C17C18C84F3E06D7AFAF995C72288EFC100204766A6618AB253E75F87395", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127861, "uuid": "cc4a43a9-f75a-4c3e-af4e-8adf583d85ea", "value": "24576:3MZ2oZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRL:3MZ2oZ9bq+MmMEL+hcjXHC/wnwdL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127861, "uuid": "4ef92bc6-9811-4278-9f02-98d5a584f153", "value": 1394468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127861, "uuid": "01027a9e-719c-4a7d-9b45-cec995a8f11a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50b57900-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127861, "uuid": "d80896f3-d788-4ee2-89fe-7887797ef70e", "comment": "Malware payload", "value": "7423aa72c07fd124a69d6237917a61db", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127861, "uuid": "afb3445f-b407-4543-b1a7-5edcac7b605c", "comment": "Malware payload", "value": "21fb64a209e1dd44d43425e1ca3940b7794908dfd621e2fb317041a39bf80249", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127861, "uuid": "af2cbfd9-89db-4c45-a6df-99a2147233f3", "value": "T12DC423443901C1DD874A6F3AAD944EB46E7D80E79A5E790027CEBD827D85AB033C9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127861, "uuid": "1492eb03-0902-4099-8f00-63457cee5bd5", "value": "12288:NqwEDcCCXW6wlOMWROC/FTeHo22Qm7NzofOr/mShS:agCC+4MQOC/gHozN7NzomLmF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127861, "uuid": "9bde504a-508d-4b04-87fa-ae897feae368", "value": 578949, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127861, "uuid": "e3047e7c-7f71-4387-b478-9098ec32a867", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50d103d2-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127861, "uuid": "37103732-bc83-42ce-993e-39320a4a6b7b", "comment": "Malware payload", "value": "1ef71938a4e94cdd4b6fe2061fe1ce37", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127861, "uuid": "ea582868-1e03-48b6-9d46-417298328304", "comment": "Malware payload", "value": "7db0907aaf8336d5d249b9ac014d8de2bfd08aed36779c154011141fd7ab2a58", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127861, "uuid": "c3dc2018-9990-42f5-9baf-2f0c17ba93d4", "value": "T1D7C423052521C0CEC3891F3E5BC0AAD06DF6509F9B48F5843ADFF91D79C0AA536E9B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127861, "uuid": "fd573ed6-800c-4473-b9c4-cdbfec43d1eb", "value": "12288:n+CGvJAevoAVcAJ6wlOMWROC/FTeHo22Qm7NzofOr/mShB:pWJR9cAl4MQOC/gHozN7NzomLmG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127861, "uuid": "ac613fee-ee7a-4f87-9368-93c2e1be0e31", "value": 584667, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127861, "uuid": "5fdfa88d-0b02-422c-a1de-4f0c250ac889", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5122e33b-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127862, "uuid": "cbfd365a-3c52-4642-9ff1-c924d48c22f7", "comment": "Malware payload", "value": "7d97794b9b4f50974358e71e6717809b", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127862, "uuid": "4dbe37d0-613f-4072-ab13-eeb9c2cd76eb", "comment": "Malware payload", "value": "e790bb07b8a12ec4325024f86fcd84179b8d61845ea34129b54aeaff8211aaf8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127862, "uuid": "32e503d5-95ec-4df9-869c-e5920df1ac29", "value": "T108C4331604CD4AE1C0D382FA176746F5049A4E38EF929A7EC43C34C9E340D79FB296", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127862, "uuid": "3b84ce89-aa81-4e5e-9569-35cb251108fb", "value": "12288:T56zQTBL8mLpzmA4C+9NgOZTUqnMmzDF+nuwsQab/YpUiyCs6ZHfipRwSb1eBT:IMTBL8Spd8NQqMm3FSuvdiyCJiMSb1k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127862, "uuid": "417b4c9b-5a46-43a6-855d-2b746f22c30f", "value": 579945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127862, "uuid": "a622e921-ef1d-4c35-a109-12a9b8ecea28", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5237e707-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "1d4a7590-1ed6-4599-9357-a2835f78089a", "comment": "Malware payload", "value": "33e6e4cf725aa371acb740ac86a7f1e2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "f38e2f45-e03b-4c46-b2e9-8f007354137a", "comment": "Malware payload", "value": "ceb95c6e7dad44c39a1141d7b3e70456db538cec31d8f130dc1051e873e289de", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "fb239ca3-09a1-47da-b4e7-3769190c4f40", "value": "T1C1C423052521C0CEC3891F3E5BC0AAD06DF6509F9B48F5843ADFF91D79C0AA536E9B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "59001c94-074a-49eb-b56b-091788f4d1d1", "value": "12288:n+CGvJAevoAVcAy6wlOMWROC/FTeHo22Qm7NzofOr/mSh8:pWJR9cA64MQOC/gHozN7NzomLmf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127864, "uuid": "b7298986-749c-4c80-a1ea-1737eaf1779c", "value": 584667, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "dbb40296-b59b-46a5-9264-f3513bcef780", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "523be71d-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "ea3802ad-0b45-4924-80c0-9c08018a8fa7", "comment": "Malware payload", "value": "f6c7638ff10e2195aa5cca39be0ba526", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "02675ba6-100f-4119-9ae2-4eed1b683a9a", "comment": "Malware payload", "value": "71b37b48f80106fc864be7e82481cd1a2f7decfeaf1dce45abb924d7f32da933", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "7ce3ee8a-2a69-440a-ba28-d6b0094e7848", "value": "T171C4331605DD4AE1C0D382FA175746F5049A4E38EFA29A7EC43C34C9E340D79FB296", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "2ea30f05-1506-4ada-bca2-6ff88272670d", "value": "12288:N56zQTBL8mLpumA4C+9NgOZTUqnMmzDF+nuwsQab/YpUiyCs6ZHfipRwSb1eBi:WMTBL8SpA8NQqMm3FSuvdiyCJiMSb15", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127864, "uuid": "49a55680-f28a-4577-97ce-0a74a9bf57d2", "value": 579945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "e63fc598-3c2d-402f-9a11-219f6dd8b017", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "523d8848-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "a5612bec-c5be-4e34-9db5-00c6cfda93c3", "comment": "Malware payload", "value": "38441dbc98e8d2e2675193f08f24c62c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "c5beb59f-9521-4d9c-a66e-21c03933882b", "comment": "Malware payload", "value": "afbfd06199df05f91cd5abc06e1891e8c31196d690ece548ade4cdcde5bfdbcc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "10570c2c-53b2-4f88-bd59-e4b06576be1a", "value": "T17555338A817C19C84F7D0B56B7FF865CB10A8EFC100218B32B5A44EB793D7DBC2645", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "9e2eaaef-2db1-4333-9c36-2931e30aa8e5", "value": "24576:9PsS0kJQHhpjooZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRZ:AkJQrooZ9bq+MmMEL+hcjXHC/wnwdZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127864, "uuid": "24fbb342-715e-422d-93f2-2e68ad1ad11c", "value": 1394813, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "38723886-5792-4143-b213-3c478349d10f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "524bafe3-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "34c67290-bf47-40e2-bef8-1b6f10980c6c", "comment": "Malware payload", "value": "48cd727ed1950a2592fd4515cd0d2239", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "71a2018b-0f1a-4664-a837-5062df39e1c6", "comment": "Malware payload", "value": "ed8410e100eee0fcc7cff09fa40ec5a60c09eb8bf29b9e271004b7b522336268", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "5a360226-4e23-452b-9f57-d74754206388", "value": "T1ECA423EC4DA10A22AC6BB604690C5F430B65D44F3BDD8DE91A0F3EA4CAD7C544AD92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "68f28088-009d-4694-8fea-88aa9fafa074", "value": "12288:LzYfcEaN9B/Jm0LU0gM7aQxSDbvyiXKkFfaKX:wfclN9BhmSHeaCKkxaKX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127864, "uuid": "837a996a-5f42-43d6-b7a6-c1d4a0e228af", "value": 462519, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "a3cb7875-fa4b-4675-868e-85ddf5db24e9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52555aff-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "bc2d0e59-a003-4bbe-bcb2-d98f0a170be0", "comment": "Malware payload", "value": "4095c60e1476f857e13417a08513b3e1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "62562e9c-57db-4489-a2e7-c671684682db", "comment": "Malware payload", "value": "7191d61c60be3e5c5adb689022f92781f65d18d4c6a314129e97cd4445c533d3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "a1d974bd-de72-4338-ba69-f6220d913351", "value": "T1F8C423052521C0CEC3891F3E5BC0AAD06DF6509F9B48F5843ADFF91D79C0AA536E9B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "481a076e-316c-4ca7-acab-961e907dff99", "value": "12288:P+CGvJAevoAVcAv6wlOMWROC/FTeHo22Qm7NzofOr/mShD:xWJR9cA34MQOC/gHozN7NzomLmo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127864, "uuid": "2963f1cf-b279-45e5-b48a-d63de94ffb5b", "value": 584667, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "daa2b6aa-2967-4a51-8210-49c0b58c85de", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52690cb3-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "1c968804-3f36-4b32-99da-2b90855f815d", "comment": "Malware payload", "value": "d0d6b8f7fda5e9ac2bad2489e3718783", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "03489471-f388-4246-9073-22a366d100a7", "comment": "Malware payload", "value": "3c3756f4c898544bd26c3ac60a661a8b86eecf6246a08591b8d3e0a2225d94a5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "9cb767b8-59ee-4e69-b7cd-2ac2ffd67f72", "value": "T1A2C42304340681D5835A2B1EAEC4E6F0BEB5A0DBFA1CF940AADD7ED06DE52A177C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "52e3851f-b568-44f3-8204-6049f232b499", "value": "12288:z6wlOMWROC/FTeHo22Qm7NzofOr68mIeA924EwCK:r4MQOC/gHozN7NzomW8GA9d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127864, "uuid": "6ff1ceb7-70d5-4a52-b81d-e2b62e9ed2bd", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "69ca451b-b85a-40a9-b9e5-4c8c93031e50", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "526fb0a2-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "469ef364-5097-45ee-9e9a-652ebcc4cbdb", "comment": "Malware payload", "value": "6beb43488db68cc83e39064e05d981f1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "f9510095-3c2b-4169-9301-91bdfd40eb57", "comment": "Malware payload", "value": "b6a0ac23eb6994be0c8b69c8df0430c3f8e1384ecf87299939382d20de56cd70", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "dc6b19fa-2463-4844-bbb6-4d9651433544", "value": "T166C423445C187B6C3AF6A0FD2AB65D83631E1DFAF0D23DBEA43484FE1C16264A1858", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "1a2a738f-58c7-4a99-b542-2b1dd54f72db", "value": "12288:8b7TqKR2IkSlQaALUMF2G5SLjrlFlU7ecTUNZhmbs2sYbl7V:i7fkSlQaAIMF2SSPrlFYTU3hVYbl7V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127864, "uuid": "c0f79ad4-dd7b-4d2e-b28c-21fd90bc4f45", "value": 584990, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "ae573b5e-9571-42a9-b16b-b7ddd275072f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "527d2698-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "775ca1ba-7a06-4752-a1a5-766be7b307ca", "comment": "Malware payload", "value": "1f84523079434f1e12da7a0b8df9dded", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "2d45fc62-2b5b-4e39-a2bf-62aa181157b2", "comment": "Malware payload", "value": "76bdb01b16d21986b2bc95070b09ebddccee51d742b7cbd4f7f3878c497c53ad", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "3b8e9cb7-101e-45c7-bec6-7feb7d28a466", "value": "T186C42367226F72500DFE92ED8E4156146D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "9ad11416-7de0-469b-9d56-77879dfcfa05", "value": "12288:WeCEhtb9qO3g/ALyYG0ZaDajTCXMO8xzDOeQak1:ptRA/f0Za6TCXKBxlC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127864, "uuid": "e8f6f1f4-5961-45f8-aa62-edaf9944ea31", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "5b10c12d-0de8-49cf-bc23-34e3c908b301", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "527e38cc-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "cb2262e7-e929-4369-9897-41d3dbaa2088", "comment": "Malware payload", "value": "d5d756ffed5cabe44f233c97cf0ef32c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "cd39bf50-8dab-4719-a56e-bb935daca81a", "comment": "Malware payload", "value": "2698cd49483168e91d78fd305c4b95ca7b8bc74f88bd04056b291cf3ce1b3339", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "c1c2bc13-69ee-4b8b-a3d1-ae05f9037780", "value": "T1A955339A407D29844F3D0A6377EF9A1C91108AFC10420C736B6A98DB663E7DFC7749", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "a80d8042-e057-44ad-a6e8-70440458fae6", "value": "24576:EyJe7oZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaR7:ZEoZ9bq+MmMEL+hcjXHC/wnwd7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127864, "uuid": "b38d236e-09cc-44d6-b360-996415ca071e", "value": 1386736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "fae8b1ef-06de-40b4-a29e-220217cbe48c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "528302d0-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "57ffdb73-01f9-4513-87fa-fd85fa61260e", "comment": "Malware payload", "value": "19332c0b15d0946a81023bc9082ef007", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "a85eab8e-8fd9-4c0a-a8cc-40b8b8851d2a", "comment": "Malware payload", "value": "69c107e3f5a228f547ed770bec9e0472cc1f8b81fb83ac2e667c5787ae863f32", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "384731e1-2d16-4da1-adba-5cfdb664996b", "value": "T1E3B423CD64BED0A87B658DDA9FDCBFD30CFC403A6D7526F2A51C1A13A1C400B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "682001cc-4b4b-4ded-a551-85300615b7f3", "value": "12288:tB/e4pqNFTFbEXkHDoGbDDGIabs/7iiEVwYg2l3/2Ny/:tBm4pgT1oGTabs/7iiWw0D/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127864, "uuid": "f5ed3932-68e6-4746-a473-099634352223", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "361a1e77-132a-460e-9f95-a3f27a38f164", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "528967d8-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "d5856c2a-1458-4c0e-9337-8f5cbd4e51c7", "comment": "Malware payload", "value": "869300d5ce51f850c3a9d7025bd41708", "object_relation": "md5", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "d158d52a-8e71-4ac5-b8c8-d9e8b424affb", "comment": "Malware payload", "value": "9597ad08372713d510a244c5192bb89944d4e07324a4e0f249f000b3ee51f464", "object_relation": "sha256", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "34374360-7699-4c81-b0a5-75637ad2e814", "value": "T1EEC423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "5fc3d383-a82b-42a8-939d-8d1a53ff73e3", "value": "12288:QyBXIs7rM1IcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5g:tImQ1AEA/f0Za6TCXKBxeW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127864, "uuid": "d33e350b-af98-4bae-94e1-e0146a605cc8", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "19ef38f3-cf60-42ca-ad13-22cf2d51fc98", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "528b8278-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "545d69f2-635f-497a-967d-1205b7f4662c", "comment": "Malware payload", "value": "f875a0d516388616094ccf8982e9e50c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "5c0c550b-5508-4ee5-9d3d-70d4de35a868", "comment": "Malware payload", "value": "0c5a8591d43cabec531997792c276ee9bb8fce2cefca50c5a873b9c26de7b304", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "6bbdc1d1-67f0-4a1d-8842-9fc64681627b", "value": "T1AA5533C6807C28C48F7D0AB26BFF95AC61209EFC10021C772A6559AA753D38B87B59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "46ca4245-9d5a-4a02-a8c0-70d17f44a81e", "value": "24576:GJA3RwN1oZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRo:+A3RwHoZ9bq+MmMEL+hcjXHC/wnwdo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127864, "uuid": "9255f2ac-9b4f-45e9-95f9-ac345300cff2", "value": 1394413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "867481cc-a245-4c86-8274-ffbac4a2af07", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52968c04-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "cc7defd1-0b24-4bd0-bf35-4ae6f681e5e3", "comment": "Malware payload", "value": "ce09e243dc44c015e7770364a040062f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "fc796f17-b4cb-4e0d-ba7c-d33791e973e2", "comment": "Malware payload", "value": "80a241d766aa0379c2bea6a5ae19011f73088277c63a5856ab8c5746944fde1f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "c0290d34-e7f3-432f-8f08-5645fd0000b1", "value": "T1055533C6807C28C48F7D0AB26BFF95BC61209EFC10021C772A6559AA753D38B87B59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "65d06275-d83d-4c56-ae7c-e86afe321e55", "value": "24576:wJA3RwNZoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaRW:sA3RwzoZ9bq+MmMEL+hcjXHC/wnwdW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127864, "uuid": "f438acb8-c490-40e7-b1c7-408cc218d206", "value": 1394413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "6e88168c-2e79-46a6-a6ae-35d765d89d48", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "529a5351-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777127864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "9ced3c0b-7794-4361-b09b-2ffdd921a5ab", "comment": "Malware payload", "value": "cbc4cf8399f624a3354a2a492e59fe53", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "55b6eab7-bdad-490c-bc62-f998dae13010", "comment": "Malware payload", "value": "e859f03393f4d12741289032643cbf829c50b9bca7b5e0888d0579c1ee51f13e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "024c5ebd-5089-4076-94ed-6c84beaa4a67", "value": "T123C4331604DD4AE1C0D382FA176746F5049A4E38EF929A7EC43C34C9E340D79FB296", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "861e585c-5d8b-4568-bb55-fda0ac8ff932", "value": "12288:556zQTBL8mLpQmA4C+9NgOZTUqnMmzDF+nuwsQab/YpUiyCs6ZHfipRwSb1eBE:6MTBL8Sp68NQqMm3FSuvdiyCJiMSb1b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127864, "uuid": "9920673a-9bf3-4a03-838b-c5111941e528", "value": 579945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127864, "uuid": "1a9073a2-11c5-4d4d-8c12-137096c18d27", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60296ec4-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777127887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127887, "uuid": "5ccf951b-e2cb-4bc0-8df8-f96e2ff1aa70", "comment": "Malware payload (Mirai)", "value": "40e03abbfcfbe1800780186dff3a74ae", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127887, "uuid": "9a440b32-194c-48dd-a02f-3c622c1bd4c8", "comment": "Malware payload (Mirai)", "value": "52d8868b2e66f5587bd77067c6aa685e912920becf7878a19b89d42cbd404a25", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127887, "uuid": "22f791d4-77ba-411d-8cb3-25cbb1ca37d9", "value": "T18213F2A8EE941FEECABDADF6C0CD1FB517455143724B1A08A302EEE0A667179B48C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127887, "uuid": "7ba28611-b221-437c-be67-297ebdf01483", "value": "768:1iPvJYv4xBeuMenVST/f4GPxsLfxM7+3W4Cn1AzBAcGrBARplV6BWc6L2WR:05pMikkGPxirCOFf6qpW16LN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777127887, "uuid": "1573f88e-db61-4bca-bcc2-33ccb463791e", "value": 45271, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127887, "uuid": "4d1c8345-9c89-4192-8fd4-6e263054e2e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ef942a8-40b7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129147, "uuid": "79332151-ba1f-43ff-a7e1-98287b8fdb81", "comment": "Malware payload (Mirai)", "value": "a8b7fefa6f6337ec31f28ad6c374d0ce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129147, "uuid": "0857f444-7557-4440-888c-5749cd8169d0", "comment": "Malware payload (Mirai)", "value": "48c87a2b07e635d5f5179b0d20d02d07ecea72eb77d0c3c0b8c3c5cdf43a4ec1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129147, "uuid": "91cefe30-e0e8-4789-884b-88ad726e8c75", "value": "T170040905E8144B53C5C32BBAF79F42993B326B2897DB3301EA19BEB42F4679D1E391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129147, "uuid": "ee320efe-31db-44fa-9e23-27f8bb2ac386", "value": "3072:oJFTnVrSLcG75Hxqf64J4VnFKvD7Nt38+eilIRzbhmoknIDjZitsJUjRi3hi:QAUf64SVnFG5t38+5aFmoknIDjZitsJi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129147, "uuid": "f559ea11-6022-4769-9c18-b624539bee05", "value": 180993, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129147, "uuid": "9b724e21-42ee-4a7a-bdea-c6620679dd24", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f1f093d-40b7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777129147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129147, "uuid": "ffac4112-2ebd-4d15-8c7b-fd8eccadf67e", "comment": "Malware payload (Gafgyt)", "value": "29a47f2b042f8da682c6e53a007c8fd1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129147, "uuid": "fde35cc0-f542-4d5a-a7c7-451e2b9fb37c", "comment": "Malware payload (Gafgyt)", "value": "b13e9abd4501209056fa1cc229e28e4d8cd9a0415d2ff02ceea26b427a3dd2ab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129147, "uuid": "210bdedf-9585-4c07-a59e-57647a6f35ba", "value": "T14D041803759185FBC4D68FB41BEB95528933F8391B32620AB398FDA91F0DED86E1D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129147, "uuid": "1bb76367-f362-413b-9860-475d4c4d8a0c", "value": "3072:W8dZDIEKXlRvGGzbJU4lpqppZV4A0KkLxRmuan+wshqo0ENbfhhi:W85ED+hIdmuan+wshqo0ENbfhhi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129147, "uuid": "ae5bed29-bddb-4989-b84d-a63c92114c00", "value": 182678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129147, "uuid": "48ac0a4a-2068-4186-a82b-24da64cef8ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f2c2ca7-40b7-11f1-bc00-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1777129147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129147, "uuid": "f87ec03f-edb2-4da1-86b2-c2092f704750", "comment": "Malware payload (DDoSAgent)", "value": "84dd5d786d05793c1f04bfc81f1fea87", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129147, "uuid": "b53e3428-fbb3-4ee4-bcfe-30705b71a92e", "comment": "Malware payload (DDoSAgent)", "value": "277247f3700a18de8fa4688c4bbeb370d94bd1e2af1b8e4330831a9cbca65b1b", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129147, "uuid": "e6603e1d-cac6-412b-bf0b-3ef4180def49", "value": "T19924E7076BA19EF7C89BCD3302EA860120CEF05722956B6B7378D65CBB4A94F49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129147, "uuid": "756512b8-f4f7-4fb5-8d25-0042c9c2043c", "value": "3072:+kkyo8Jbqa7jlSLUOdIwYDuWCP3moz9nzBsNcPUTkFizT:hkKP75zO+wYi13moz9nzBsNcPUTkFizT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129147, "uuid": "decce0ec-82f7-4ee6-99be-2ae42e6b9252", "value": 227701, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129147, "uuid": "c460da12-2d27-413e-bc54-47b86db7b4de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f316bb5-40b7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129147, "uuid": "8f152f23-7bfa-4c99-97c6-e36e69022e1a", "comment": "Malware payload (Mirai)", "value": "05eeee2a15ba146477c1a74ff778f970", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129147, "uuid": "cc3765a9-c52d-41ba-8638-6296963f786e", "comment": "Malware payload (Mirai)", "value": "c1acb4b97025e9e7a6dfd906baad136c95b57b7e1a12c1eacd34084e444e30be", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129147, "uuid": "56326c1b-63af-4e59-a5e2-16447b9fcca6", "value": "T1F304F901F9144B57C5C22BBAF79F42993B366B2897DB3301EA18BEB42F4679D1E391", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129147, "uuid": "51226f8c-fbd5-4e60-afbc-46d075b3b965", "value": "3072:PDMToVhS6iG754rQH/4PNYdD4siYDsz3+IaWf/m5kn8SGZEB1LbjSBwmi:LSUH/4lYdDJ7Iz3+snm5kn8SGZEB1Lbn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129147, "uuid": "59c3e764-5b11-4512-b66d-dce30549ae08", "value": 175047, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129147, "uuid": "4422e96e-b802-4b07-80b6-961837aaadb4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5720eb1b-40b7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129161, "uuid": "63a21ae2-f715-4f07-a5f6-e8cb16512b9b", "comment": "Malware payload (Mirai)", "value": "b707545ea541de333ea46a7a303b6ac7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129161, "uuid": "8ee19dc5-fb6c-43e4-a890-672c88fdea08", "comment": "Malware payload (Mirai)", "value": "765b338be709b6126af60462c62d3edbd69ea1672f92a6c1e8c836ac4a0c1c4a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129161, "uuid": "a978b5b1-b513-4477-8e7f-80b68484d563", "value": "T15944AE27F7058C66C06606F98E8B035D1373C0005F1BEBDB7A2C6A386E5769E9D97B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129161, "uuid": "c279bdcf-e391-4106-9fda-622217423353", "value": "6144:G/CDf657IhSqhgCsd2+aqNe66Hf8PDQKFm1A8Gmc:G/C74ESm9+fD9m1A8Gmc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129161, "uuid": "de057dc7-d60d-4557-96e5-c9ec89312259", "value": 268080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129161, "uuid": "9c11fda5-987c-4069-b336-c33a52f2a567", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ce298c9-40b7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129170, "uuid": "481e587b-ed93-4be5-bc6f-b376f727d150", "comment": "Malware payload (Mirai)", "value": "ccd1110677848fc5f381ea4cbfd63fbb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129170, "uuid": "f72849ac-c091-4dc6-85a5-478751ab9441", "comment": "Malware payload (Mirai)", "value": "fa6eda47d9577b6641f1605dd40bb680e4412f488571d1b0b346ea1c5e6f9f6a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129170, "uuid": "b6f55086-d7c8-41ed-85b1-d8fefef17206", "value": "T14624B61A3A22EFFFF568863007F38A7097E5259636A19745F26CD71C1F2028D681F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129170, "uuid": "8460e3b0-7d39-4fe9-a34d-6b63df489a1b", "value": "3072:xhNA0o20YPukHbCRfnRHRQzzThdxAmoz9nzBsNcPUTkFizT:x/PH0fn98PhrAmoz9nzBsNcPUTkFizT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129170, "uuid": "7bb4b7a0-4d14-4ca2-836a-55d4f0ae9fd0", "value": 227640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129170, "uuid": "d46ec714-8f0f-4376-ac37-2fbfc4786974", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d171f92-40b7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129171, "uuid": "c8db0444-0f92-4a22-9f0d-d412351c5489", "comment": "Malware payload (Mirai)", "value": "e37e54372888f3e320263b031ee634b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129171, "uuid": "6dbe73a9-9ab6-48ee-9768-81dc58f263a7", "comment": "Malware payload (Mirai)", "value": "fafc4769d3f812ff8d7384cd729378381058469674f7e614834b6c6f1a05275a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129171, "uuid": "b8b5505e-2efe-4801-baba-bbb803f1246b", "value": "T18BF47D9BFE6E3C47D2D6E33D9B8A83B1632B7590D21341527642432CD9C6ADCCFA1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129171, "uuid": "966b8a6d-6003-4430-b686-e9d3e2d8023a", "value": "12288:VE71XtHjWKCCxdqKB/pgLl65IXRETcs5pVB+3cjgTVoVg4:VEHlxdqK12x6dEYg5oVg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129171, "uuid": "15f1184e-dd0a-47fb-bcee-78bbecc6bbed", "value": 750320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129171, "uuid": "df814556-0986-4a6d-acad-e8beb5234e31", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d17a455-40b7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129171, "uuid": "1b0d88a2-905c-493f-a3e7-cfcce4fa3d41", "comment": "Malware payload (Mirai)", "value": "d561b80294690532aa8d47e9ce05f942", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129171, "uuid": "6e03da41-cb60-4fea-8081-4fcbb97ac7fe", "comment": "Malware payload (Mirai)", "value": "9888cc5d368448594fcee8a8f915560d5d7b61ac80163e22308a2115d76a8ea0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129171, "uuid": "e89512f4-34cd-48f1-a1c7-703073784ae5", "value": "T13DE34A416646D6F3C8C30FF602A7576A0633E8295F2B9E49F32DBCB44F0659CF2196", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129171, "uuid": "e7579b1f-4fbb-4a29-b0d4-3b92007a5791", "value": "3072:chYhMMAOi2/GOLwx/UaW3sZDMdBmyanDdrh350BXDfwhc:chTsaWcZDMdBmyanDdrh350BXDfwhc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129171, "uuid": "3ffa448d-1cb1-44cb-9a67-ecf2e1eb4e1b", "value": 149528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129171, "uuid": "71aa9d1b-480e-45e6-9595-f5ff28b14e25", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d5da107-40b7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129171, "uuid": "921a6718-b239-4e51-978c-872ccd183b94", "comment": "Malware payload (Mirai)", "value": "f1903ba052d6706b03e10714efc284ce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129171, "uuid": "0f940bbc-1ba9-407b-bd79-ebfa589319d5", "comment": "Malware payload (Mirai)", "value": "76c6edef02fee0bf9de205f5c6f48dc93e8984d0f02462fc0dbb4aaa0fe2ad9b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129171, "uuid": "8aab6b22-5df8-402e-bb88-4554ec854f22", "value": "T1B0E329416686CAF3D5C31FF612A757220633E83A1B1BDE05E32DBCB45F19188F11AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129171, "uuid": "bc89d76c-c337-4918-ae6f-cbcc574ba6bb", "value": "3072:pRleG2jGkKSJ+/+FllVJtt4mnmyanDdrh350BXDfwhc:pRl9m/rJL1nmyanDdrh350BXDfwhc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129171, "uuid": "0880b038-0c89-4c72-9c88-ed0d812514df", "value": 147224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129171, "uuid": "80d3b512-7615-4738-b27a-8b795baf2271", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d658af7-40b7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129171, "uuid": "8798f8c4-4731-4878-9e3a-49e561092f10", "comment": "Malware payload (Mirai)", "value": "387f61191bfbc6c8edc3b90f851e194d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129171, "uuid": "587aa3dc-544d-424a-98b9-9c2f17b63188", "comment": "Malware payload (Mirai)", "value": "caed174f157f0d80119a5342e5147cd2ea753f55f0cd8cc6079e1a9794641dec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129171, "uuid": "d05a5892-5999-4e48-aaa0-32ed2001e4f9", "value": "T1B0042B05EB508B53C1D22BBAF69F434633339B58A7A733059528ABB43FC679D4F225", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129171, "uuid": "4c7d2be4-d250-406e-b28e-5cba458c3dd8", "value": "3072:wv3e5CsovungilFqWXxna5uG7QiXs850P5ZOfPzSe7M/RpGjICSO:wOTVXxna5uG7Q60P5ZOfbt7M/RKIfO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129171, "uuid": "9ea21241-0ae7-49c1-961b-13e3977e1273", "value": 183674, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129171, "uuid": "89029fbc-20ea-4c19-b006-0ff03d26aacf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bdf3bf0-40b7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777129276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129276, "uuid": "9a36ac6f-fb18-44f5-b437-3c0816114df3", "comment": "Malware payload", "value": "55e04d5b3ebda3460a389b8e44115af0", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129276, "uuid": "c8d6c491-c4c0-43a0-aff3-d575e1a8061d", "comment": "Malware payload", "value": "7b448a6911e6604d86b6a46351f2a005033c9491066ade9118b00ce2aa216a69", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129276, "uuid": "d8e8e512-072a-4930-b954-19bfd822d476", "value": "T10CA4231EDA2FE18A87514D389F94DF3A1D99382C9446BAC077C4D23C6FBB725A10F0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129276, "uuid": "58e31a02-9154-4df3-b1f0-ca44bb7f7443", "value": "12288:uRGH8HQNBPUj5IpMlpuDy0x8OkKt2MLBQ3ETSLugiGC3Cg:uRGH8wNBaCYmyDa0MYEGLugs3T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129276, "uuid": "7f21fc15-e1da-4a78-87d8-f091e1ce0c02", "value": 489518, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129276, "uuid": "0a8af7c9-daab-421e-acf8-59ffba4664de", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "042d9dd3-40b8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129451, "uuid": "90231860-d637-468d-82d2-03da79b69b54", "comment": "Malware payload (Mirai)", "value": "e0ceb524d4041510f5f96a1709eabae9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129451, "uuid": "258c437e-a724-4658-b307-f6e0c875ae4e", "comment": "Malware payload (Mirai)", "value": "ef9edc8f6c2741064e15109552ae7afa70861ae9df91aa6231bb8df11b834fd7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129451, "uuid": "b533c4e1-8cd7-40bc-bbfd-0c186b2dac94", "value": "T146561897BDD24942C4E43A7BA8BE80C473630EB99B9752565D04FE3C3ABE1D90E383", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129451, "uuid": "548f3a5a-7c86-42bf-8b35-f79bf9a9820d", "value": "49152:3chkyOBGjWi7B+o+QT8PZs0VLXN++wxdJE9ZgNW5E1:jykGjWi7B+tO0UPJEP7E1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129451, "uuid": "ee8b3d06-9fd0-4fd7-919f-da91c8c20d12", "value": 5963938, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129451, "uuid": "5b72da89-d392-4ae3-8b8d-c93217220f6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04326d5f-40b8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129451, "uuid": "bf8a4dac-fc6d-469b-8fa4-b459f63968c3", "comment": "Malware payload (Mirai)", "value": "ac08e4ea9030143004fb756bfd10a6e7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129451, "uuid": "59b1de6a-0ce1-4e68-a7e6-9a4b786d70ee", "comment": "Malware payload (Mirai)", "value": "b871b50c2d749a0d06c7436c897bd45c56f1099fada77272f579d447206746e4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129451, "uuid": "87cc6022-4f01-45ea-ad93-686628bd538c", "value": "T17A561997B9D24943C4E43A7BA8BD81C533630EB98BC752565D04FE383ABE1D90E393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129451, "uuid": "5da1ea35-7492-4405-bfd7-0df804ad33ac", "value": "49152:emn2BIPExxyN/LqMtXNlWsMM23SFHPcOlAHOJaMaFT5EG:ZVsxxytqwXNlWsMMcSkHeaMsEG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129451, "uuid": "bead5c99-a353-4881-b7e3-a40e66bf87f6", "value": 5963938, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129451, "uuid": "2d399fc9-3739-4260-ac87-7f56d7bd5073", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "049b31e2-40b8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129452, "uuid": "d51e8d1b-5ee7-4c02-9862-1257b5fd0657", "comment": "Malware payload (Mirai)", "value": "a7b290bf9188e8c5e65cddff0c2d4a4f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129452, "uuid": "d28ca353-75cb-4674-be46-c3b0776654f6", "comment": "Malware payload (Mirai)", "value": "d7db7cc665c24daf43fa0a5f079faea75201afd47c9dad96adeb82cbd2775712", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129452, "uuid": "cebc5783-accb-4ef9-ab3b-3e6b32bf10a5", "value": "T14A66EA19ED842BF6C81D5B3444EACA9503B05E104AF19B262664FFA9BC772397F47C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129452, "uuid": "c82eb7c0-5959-433b-b5c1-ac60af4e5ca0", "value": "49152:dHqun7RQO88/JeyXsDoBjxd1Jqbi4N5Ez:iGUIMEz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129452, "uuid": "7d4edfda-db83-4479-9950-3cd8407599df", "value": 6750401, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129452, "uuid": "6d17e067-a426-40be-815e-41705310e27f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "049e4853-40b8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129452, "uuid": "b349070c-4076-4daa-bb54-c7cd52b72a3e", "comment": "Malware payload (Mirai)", "value": "55ba9bfff420e5f297f65fab0d82860c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129452, "uuid": "3dc09a6f-a86e-4763-8a15-d039d50d53f8", "comment": "Malware payload (Mirai)", "value": "a3ed3052c75b93adec2f9051a3a96e94baa165f17c88d926bc9d6328c3fbba68", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129452, "uuid": "e09c0c00-92be-4d3b-96ff-d81806ada5c5", "value": "T1C7662A13AA2CDB0EE11432344CF2DA986B291C8541DAE927B791F718E9F306C5D6ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129452, "uuid": "7d8bd2a5-9a50-446a-9504-01a97047bb4e", "value": "49152:3/l7fRyilgRSyuWmlAVESawmRSoyBL/pdBr9RlflPacFgK2TLxcB9GmNg+1/MbHn:/ooQPZkIQn4jEu8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129452, "uuid": "97d3c5ea-89e6-4140-91cd-acfcd5a56174", "value": 6750401, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129452, "uuid": "7197498c-85cf-43e0-88af-72a0eb2fae18", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04ab5007-40b8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129452, "uuid": "5dd73631-181b-4fdc-8bde-adb0be592cd8", "comment": "Malware payload (Mirai)", "value": "2251cbc3403e3685469f0d70f2ee72b4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129452, "uuid": "8b4f2ab3-aa80-4414-a11a-762f0e6febe5", "comment": "Malware payload (Mirai)", "value": "770b034fc4c84cafbb782834e888843aa42da36f6a7b05b4de2a369d993f5489", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129452, "uuid": "80d24d02-36d1-461e-b1d2-fc44dc4886f8", "value": "T18C465B55FC2D6462C6C9B6756FB643857239BC488F82C3236618FB3CBAF27548F122", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129452, "uuid": "24aa0a8d-b4fc-4452-8345-1f8506fc86b8", "value": "49152:CVOZh4QKKScbOm7Iz4F6Sc+ZkU+pKajTaRwjo5ExsX:CVsmQNScbezo65RORYaEo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129452, "uuid": "e0bb87ad-2170-461d-aa2c-54cb43019b35", "value": 5636258, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129452, "uuid": "31ad404f-cf9c-44bf-9d39-55e3e169d63f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04abbe65-40b8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129452, "uuid": "4615cd33-2d44-482d-bd8e-f1106c79349c", "comment": "Malware payload (Mirai)", "value": "3c59cb9178268b2f41de5bb7a16b9b2a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129452, "uuid": "18e0c04f-8464-4007-899b-134241204abf", "comment": "Malware payload (Mirai)", "value": "8e5321f0c4394248bc194e13a5cc62512d57e55aef73964abb92bfd5a79ce1b8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129452, "uuid": "0a65b974-c9a0-4338-b34d-b9b1045ef0bf", "value": "T10B563811FECB14F6E5031E3100BBA26F67315D058B24EBD7EB507F2AEA7B69118362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129452, "uuid": "240279db-13fd-47f6-b472-6b8a63442e3f", "value": "49152:PPDbru884Fpgfy6Vs/GfkF6xU7RUuld8yyA76qNDc1P3BUhhX7d0e75E1:PPjuKFOIGfkDUCd8yp78P2ttE1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129452, "uuid": "b9081c99-65d3-47a7-ae73-57fcdf254b44", "value": 5914786, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129452, "uuid": "a4d89c83-7417-466a-b166-655935a16c4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0538c428-40b8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129453, "uuid": "94544166-1511-4215-87b8-1ad3499b6c8d", "comment": "Malware payload (Mirai)", "value": "77ba1f3980cffba5a2f802ee5ca34ff5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129453, "uuid": "584de426-ebbe-4951-a43c-f18e1a7ac376", "comment": "Malware payload (Mirai)", "value": "8118ce95ee4d771a757d5c3e7c6b50ac9bc3f275df8cb6177ea8c2e53ac20a79", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129453, "uuid": "785565f7-d9c9-4953-8d4a-50449c4cf067", "value": "T15A561897B9D25942C4E43A77A8BE80C433630EBA9BD756565D04FE383EBE1D90E383", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129453, "uuid": "93ad59f2-2fd3-4eb7-b1d0-212c2805af04", "value": "49152:6AcXw4EUx/CNBcOAoSyqwOwzE5fKizkhO/uWsb5EA:b4Tx/ycMSyqUz3+khUEEA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129453, "uuid": "5eab3e74-3ed4-4838-be1f-c71731a650af", "value": 6029474, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129453, "uuid": "5eb10952-a3c6-4b67-be0e-12d8ce53cab4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06eb7d74-40b8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777129455, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129455, "uuid": "a729ffb8-9e84-4822-a04b-67d1055b6a25", "comment": "Malware payload (Mirai)", "value": "31202a75b059514ea9973cb44c7551a6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129455, "uuid": "3bc46a91-af97-425d-babd-0d0ff1e0fe43", "comment": "Malware payload (Mirai)", "value": "bf4e236855500a10e0b42660660e9a2bccee5a634186cc07184b712704e31574", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129455, "uuid": "9b3cde8a-838f-4dea-a00d-635ce5743b6d", "value": "T142564B03FCA918E9C1AE913586779253BB717C895B3127D32B50F6282F77BD06AB93", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129455, "uuid": "6d6d90a8-e38f-4f40-a928-c58db90a9884", "value": "49152:Opt5/08pryuDNMNxnUv/6L6WstIafQ3sHklF9Ubt+qXoWcyv7WsLK5iYsuwKlK1f:OpP0c/Cgp4Wb/smK0Eg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129455, "uuid": "591e9005-2058-4871-96a1-a1db6a9ef6a6", "value": 6090914, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129455, "uuid": "f20ba655-04c0-44a5-84b1-bbf0da432ece", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0896f5bc-40b8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777129458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129458, "uuid": "7b8662f9-312b-4401-9346-3d0b8dae594c", "comment": "Malware payload", "value": "22cc778d4e318eb24ff3c374b3ecfc3a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129458, "uuid": "6533bc22-a817-46a8-8083-bae79a392249", "comment": "Malware payload", "value": "9830b7741dc316e552222a6e10e2e56eda85d36d688c5d0bf7eba8f5cf8bb953", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129458, "uuid": "a7a0d87d-f65a-4029-8886-5d4a98aa42b8", "value": "T1F7564907EC9514E9C0AE953089679253BB71BC881B3123D72B50F6387FB6BE0ADB97", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129458, "uuid": "85e5faf9-d075-4b5d-90db-90d63f237d2f", "value": "ed8b780a3ce7ca4aba78a21f6bc3d4e0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129458, "uuid": "0c57aeef-85da-4787-ae50-4e57234916c7", "value": "49152:Sp+PUSy2fGnwPvCt8r4ERMDZO25kOKt2NDNJGhayrYXscsiADmCMGnGKQK1K6h7m:SpldojCrTJpgiADhDhoE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129458, "uuid": "c78e7710-112f-4d4a-90d5-46b15ae89f29", "value": 6252544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129458, "uuid": "4556a47e-1af3-48be-ba09-a5578b6d4114", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b5d39cc-40b8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777129543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129543, "uuid": "2bf6dda3-0bbf-4af2-a0f3-02efd7f2a270", "comment": "Malware payload", "value": "8c5efa04922017230ae00507d92100c8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129543, "uuid": "c43c83b0-db6a-4303-8290-a636c5e4f64b", "comment": "Malware payload", "value": "74f47ba3c383474a3c75b1a547103824d6cde4ebae373b8573482ab0abedc25c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129543, "uuid": "ba0ee268-cea0-4819-8495-8ec9bda007ed", "value": "T1088308327588582A210B028FD263336C70FFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129543, "uuid": "9c6143c4-10d5-4836-844f-722b7bfd94fc", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnfWa1VN/:XEKltp9t2SX/yr2pbfW8VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129543, "uuid": "29bdc576-f744-4f2f-9460-7fc3d6317a99", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129543, "uuid": "03654ee2-cbb5-4b91-ab8b-732041226ad5", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74882061-40b8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777129639, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129639, "uuid": "cc123492-6939-405f-92e6-5e68dcd7dc81", "comment": "Malware payload", "value": "189cb8cb85099001589af11e3def81d4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129639, "uuid": "4dd4d572-37e9-475c-a50e-52ad7f5e328c", "comment": "Malware payload", "value": "06e2ae9c3cc7e1e357b669689e58c310e955282ee583c7c319ed6efbcb14b7d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129639, "uuid": "0db38f90-2818-4c86-9ba5-06b15d078106", "value": "T1B45423F10A3B6AB0C2AE31F7711E5CC859D2FCB004A0B7F112B696C59E367D056B47", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129639, "uuid": "f08dc804-cf63-4c26-8e12-d3ca297e33c5", "value": "6144:02HeSIGCahUbRcUttLzfKhJnW1iKPkkqXVvpaOp2VCdavCYR:dxrhU6qubnWcfkqXB0OcCdO7R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777129639, "uuid": "b8fbc4a3-1877-4c9a-bcf9-df7544bdba69", "value": 292572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129639, "uuid": "e6534b2d-b611-4446-b1f8-72433b27c465", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c272f7ab-40be-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777132347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132347, "uuid": "f3a22e2a-339b-4949-adbd-27d8f3379d0b", "comment": "Malware payload", "value": "e650678fc92fa63cfba3d9922484a102", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132347, "uuid": "cfa6b585-cf38-4316-96f7-ee80198ff1c0", "comment": "Malware payload", "value": "7a64a0b0bdc4d814427eb3ecfdb6d1e1ddee0cbb62e2742b754b1c6b1527f52e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132347, "uuid": "74346c5e-0c8f-4c52-949e-b2afd870dc56", "value": "T1D3762A87B8924952C4E43A37BCBE81C432630EB99BC7565B6D05EE383EBE1D90E357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132347, "uuid": "c61c75d2-1e5b-4837-8c1e-6bb3fd3784d9", "value": "49152:PdZP7fboCPOIQ1EMwlgVinvPbF1mKOjpaUs5cO78g0UBW5Ed:7PXoLxCMwlgVinvPXcO78xUCEd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777132347, "uuid": "41798b3d-90c6-4072-ac19-a75c2c96361f", "value": 7405752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132347, "uuid": "5c9dfb61-974b-4757-baa4-58858fe9b4f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2790a2e-40be-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777132347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132347, "uuid": "84cbfd8b-c360-4af3-8b53-d3e1c799593a", "comment": "Malware payload", "value": "58d12e59676a3e17b07347f26256d236", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132347, "uuid": "92eb39b4-4984-4b86-b53e-547387687895", "comment": "Malware payload", "value": "7b4e88ec91b89c661bcf5e77465d9d4f1ca6399118d8947c6ff0da7456de1d5a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132347, "uuid": "33ee816d-1360-4acc-a931-b8f7764ead28", "value": "T1EA762A97B8924952C4E43A37BCBE81C432630EB98BC7165B6D15EE383EBE1D90E357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132347, "uuid": "e867939d-05a3-4441-9ebf-2fe34cc2d298", "value": "49152:32FJs8JfputJ06zfShd92je+5qTx0+q5MuO/9S6P4GFsbmyWkdus5Ems:mputJ0yfed92je+5qZ4GFsKV+Eb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777132347, "uuid": "26850634-8660-46c9-8d67-95c2e7f5d283", "value": 7405752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132347, "uuid": "8e239234-e1d1-459d-8375-ee7e861e6487", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c28e2f2b-40be-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777132347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132347, "uuid": "b26c22fb-86f7-4dd5-bd36-2148152b75d4", "comment": "Malware payload (Mirai)", "value": "9f050567388965643551756c55e27d38", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132347, "uuid": "ff65ea17-bb6d-4ae1-885d-ac4c89037a33", "comment": "Malware payload (Mirai)", "value": "e9936495b7ee77fab7e33c04d6a73c33370e0e5502f394a371c34deee8745833", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132347, "uuid": "cdff0629-ee4f-43c0-84c0-7213bcd5e30d", "value": "T126762711FE8B50F2E9031D3105ABB22F67325D054F25EBE3EA407F29F97B691193A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132347, "uuid": "895274fe-0469-4e7a-a5cd-a877cf49f376", "value": "49152:eQXTcXmOI0hdHUNOtSUnIzRkYiOPz2bsa/273kyMvwVIgRYXUo0E6mCLpd5EH:1oXY2HGOtS0TOrE7G3krogbgEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777132347, "uuid": "295b5f62-e6e0-4dde-bc8e-b23b460eddf4", "value": 7270584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132347, "uuid": "2a8dca50-d938-46a4-95c0-8f0ed9ced9e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2d84302-40be-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777132348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132348, "uuid": "6fbcdb45-8d8b-4342-9ae0-c436e1fe5fad", "comment": "Malware payload", "value": "c23f1e6cc3147149d7fbe35cba3c9258", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132348, "uuid": "cb12fafe-d2ef-424e-89d6-d91ec1ad28ed", "comment": "Malware payload", "value": "6a3b8e012d6c2870297663c90ef7d69636a167b1ebd12fb7f1d7521a32f7f1f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132348, "uuid": "0298bdb8-43b1-4b3b-97d8-a5a9cde7fef8", "value": "T18A761957B8924942C4E43A37B8BE81C433630EBA8BD716576D05FE383EBE5990E397", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132348, "uuid": "3c0e473f-ea6d-4a9e-a1f5-11347651b0ae", "value": "49152:4248VO+AGnHybZJGIks9isHZMPlp7XZBJtTp2ehSp5E+:4GVaGnHybZJGIksFcjJtd2eeE+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777132348, "uuid": "5466487f-fddc-4831-a995-85eec1924549", "value": 7274680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132348, "uuid": "0cbaa922-284d-4243-892e-1e7fde44937a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f916dd0-40bf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777132718, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132718, "uuid": "080d12b8-0b02-4047-a068-dbe8c69f8c19", "comment": "Malware payload", "value": "21e465771a93a129435e93912d6273a6", "object_relation": "md5", "Tag": [ { "name": "pw-4475", "colour": "#aee191", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132718, "uuid": "9b417aca-2136-46c1-a0dc-564b8c34414a", "comment": "Malware payload", "value": "83ba805eb5313d648e0a3ad8f8c35f348d5d18397938036da0504c8afc4448ff", "object_relation": "sha256", "Tag": [ { "name": "pw-4475", "colour": "#aee191", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132718, "uuid": "13c03a91-3a3b-429b-8f4c-3e7c0a0c08af", "value": "T1D4E633C2E2F468A0977F7895ADE427D2CDE243DC1AD42E443F05A30D12B121F669ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132718, "uuid": "eef5ac10-f61e-4f7f-8b38-080ee570fef2", "value": "393216:Fd+puHDveSECHR/uURu9vw+r3X8x0T+xJowcd0R:FdRHDveSEiVkwqXnTWS0R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777132718, "uuid": "85e8c33e-6d80-4908-91d7-8e7d5852dbb2", "value": 15115950, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132718, "uuid": "65243c54-d8ed-4272-b166-5f018dde5181", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9989132-40bf-11f1-bc00-82aee05be84a", "comment": "Malware payload (ZigClipper)", "timestamp": 1777132869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132869, "uuid": "6bd79d02-f521-4359-88e3-3162250b430e", "comment": "Malware payload (ZigClipper)", "value": "5e44a806263ee15f7a0cdd5a3cacbacf", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ZigClipper", "colour": "#72f06d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132869, "uuid": "fb4de356-1eef-4a48-9a8e-91efd7acc31e", "comment": "Malware payload (ZigClipper)", "value": "3194b61d652d50f11bca2edf4708a5ba322a190b6bd3d447b516507add5adbec", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ZigClipper", "colour": "#72f06d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132869, "uuid": "0b2d764a-0c03-4242-bef0-b2ed45e76c93", "value": "T1DFB57CD357DC08AD7B8448E942593A1354FBC36B2C9E528CF5E25A07B63F4217A3AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132869, "uuid": "2f5de63d-b021-4959-9f21-503ad23a7849", "value": "1536:QNjc2PE0l0ldubktCZUsNQMcjb9Z7+pDc437W+30O0IoKhnbhFUjrQlNU7R440sx:QNqkkBvN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777132869, "uuid": "c0a899b6-7a15-46ec-8327-f2ce6b633fe9", "value": 2277201, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132869, "uuid": "c096ca01-2245-4d54-8c18-7b6e37286fe6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fb910db-40c0-11f1-bc00-82aee05be84a", "comment": "Malware payload (ZigClipper)", "timestamp": 1777132933, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132933, "uuid": "075f8845-2bd1-47fa-bd00-f4e44a8d6a84", "comment": "Malware payload (ZigClipper)", "value": "a7b2e65ec3aed0ff8de3788dd56c6432", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ZigClipper", "colour": "#72f06d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132933, "uuid": "a94c3919-cfd7-4ec6-a17f-9476626bdde3", "comment": "Malware payload (ZigClipper)", "value": "f82d272a52c56f65d66ac665f3074639b93b61c094d27c75e0c77b9baffe896f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ZigClipper", "colour": "#72f06d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132933, "uuid": "b694537e-7d84-412d-97eb-9f0604467db9", "value": "T1EEF4D4EFAB60B5E4D821ABFCA4916D0183B07DD0798142AF11C7FB2BCD78A539F096", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132933, "uuid": "9c781cf8-6797-4b4c-8c13-827f605cef69", "value": "6144:1RnRDmcvpIUIHa4t4MLWnVXyklQ1UB2vCGCFy+2fUSfciSDzClE6zip6ygCOnY:1uqI7LW/lUUB2ChQUSfci+v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777132933, "uuid": "04bb72ea-1a28-4dbd-bf3c-5b634352652b", "value": 733440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132933, "uuid": "ee8b46be-0ed9-4f31-9a34-971491436bab", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cb25314-40c2-11f1-bc00-82aee05be84a", "comment": "Malware payload (LummaStealer)", "timestamp": 1777133948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777133948, "uuid": "c083f446-1793-4b1b-8fd2-05b1b5765be4", "comment": "Malware payload (LummaStealer)", "value": "fa0f3c85d447ab23166e9c5e90d68198", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777133948, "uuid": "af5e585c-8cce-4969-8157-6ae9d6352b05", "comment": "Malware payload (LummaStealer)", "value": "b73edda46a91349b37f219d3056dff65a545ba458f4c4a93eddd6fae3b99c38b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777133948, "uuid": "397d19fd-ef99-4c18-8268-cdca3635022b", "value": "T1B5A57D90ADC318B2D5423235586772EF6731580D0F3EE697DEA16DB8AB3FAD258233", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777133948, "uuid": "47a278f1-0d26-4e1c-ae1d-29689ecb35bf", "value": "1aae8bf580c846f39c71c05898e57e88", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777133948, "uuid": "189f8f30-9a78-4ece-86c1-f1715947dd18", "value": "49152:zO7gBEP9ab3HRR6VzJLQOZbooVvNJbsuWaY:K8BEP9ab3fiNQCbllNCuWaY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777133948, "uuid": "90f6d2b9-faf6-4d52-bc30-87da0254efe6", "value": 2124976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777133948, "uuid": "a30972d5-e14b-48a1-8414-f422d202bec0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62d5947f-40cf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777139488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777139488, "uuid": "81be8da1-c625-40f6-858e-6f359d8abf7c", "comment": "Malware payload", "value": "ffd630b991601782f343d64a199c127f", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777139488, "uuid": "95000f04-f9be-4769-a9a5-b25885286bd4", "comment": "Malware payload", "value": "daf2f9bf482c5f3357d790a116fa3cb6204ae4fad6b375e35c6c2860a5b9f886", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SnappyClient", "colour": "#24c029", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777139488, "uuid": "fb195a21-0941-42d1-87af-c68aad3eac66", "value": "T1432633B3944262DAC37C65B30A36754A55159F40CE35236C703FAAD9E2FA84CDFF1A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1777139488, "uuid": "c599adaa-8066-4c9a-9bf6-caf128d37d05", "value": "726e502738f0cca6934bd701a3a538de", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777139488, "uuid": "e3518797-9b8c-4aaa-9ad3-b154e244a759", "value": "98304:lwjtxiH0NiheWia2TrW/Jepn5ACUf4NYxN4P8T+bvCjiX3t:Mx/Ny2/80pn+C84eN4P5aiHt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777139488, "uuid": "9a4a3ac7-f9f6-46ba-a6d7-5280780a1e53", "value": 4439056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777139488, "uuid": "15fd927b-1838-43a2-8957-a5668a7c9470", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44b1e207-40e0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777146739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146739, "uuid": "a22eb932-8483-4524-8ea4-7f909424253f", "comment": "Malware payload", "value": "f713db0af64fdc125e7f36158324a3b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146739, "uuid": "ab3766d1-3d63-4347-8e41-04fcf0fbdd10", "comment": "Malware payload", "value": "c570ccdae59b84d6acbdc2e4d1e5fb6ae39ec6b703daf94c7e7360c3e14e139b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146739, "uuid": "e2ce9fbd-bab0-4e4a-9678-19991ed498a2", "value": "T13B5302415AA8E43ECEE2893D0F6841E6859C5DE548D3501F43CEBCF88616D68BAEC5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146739, "uuid": "eac01540-92c7-48c9-9c43-941c4aac89cf", "value": "1536:Mdcqm5iERozq3p7o8FwOA4zCKOFGUfKbeH6UhV/uvFAQ2:MaHJgMo8FwOA4zUFGUO3UhAveQ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777146739, "uuid": "c9e2646b-64f2-41cc-b15e-1d9e0456c2a7", "value": 63928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146739, "uuid": "36e7ae07-733c-44ed-925b-e59eb0b83534", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44d01516-40e0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777146739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146739, "uuid": "fd80b5c3-577e-441d-9616-6346a2a5d412", "comment": "Malware payload (Mirai)", "value": "e3dbcf5e054de21e8095e248fcde229e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146739, "uuid": "efc89f5a-d07c-4a7c-a974-4bcfb873c327", "comment": "Malware payload (Mirai)", "value": "6c34adbe36691c7f6e6432d84b8bfd542d6e5fe869fdbd38fb626f531cca12df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146739, "uuid": "b7db8622-5ebd-45a3-90bc-2fe88cad4183", "value": "T1ED146C2BB3C39CE6C51063308C316362776FD7081958EAFFDA1B3794A99772256246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146739, "uuid": "27250368-35da-4312-aa82-f26f119de43e", "value": "6144:1R9Om5159ZA0mzoWcz4Mm4ztkES7IKTtB:BZAyFzQSdS7IU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777146739, "uuid": "b6139188-62c3-47de-9d22-7dce4d531eaf", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146739, "uuid": "57fede17-ab04-4e6e-b42b-31cbb99088d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67ec5af1-40e0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777146798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "4a19956f-fbfc-4814-b047-2fa3ac3c240b", "comment": "Malware payload (Gafgyt)", "value": "2fa40c07edf83581598bbde14a8501e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "3b4486c5-9dda-4045-81ec-ed334f5625e0", "comment": "Malware payload (Gafgyt)", "value": "0920435fede3057e29f6257f7733f19bb09e41875ab45ce51780bce078129f4a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "79edd37c-edc8-4560-9174-20c1c47709c1", "value": "T101D3CF32E0086DA0DD2117B434B6597C0340DEB40AD59243EFBEE5AE28B7DA57DEDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "ddce611e-4ffc-42b3-aa33-a5032ed43193", "value": "3072:jNOFV2mOAc6NBmjOd1CVOHVv3WDxGGRhaUNhkv0ZY6:xOFgpOEoVv3MXL5NhGOY6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777146798, "uuid": "cb8e3200-5923-4b1d-88b6-51a1765cd9af", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "b9ea13fe-45c2-4313-b02f-4b6cdaa558eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67f2e687-40e0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777146798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "c7327d7a-5b85-4ed2-8424-4aeb68bdfd99", "comment": "Malware payload (Gafgyt)", "value": "022c39fadee6a940776ef77dbb0691d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "0d7d9ce8-e046-4891-a3c0-5a0eed89903a", "comment": "Malware payload (Gafgyt)", "value": "797a7c7e8c643b93b512850bbb60703530adc058769ff4897e4c17ec04c7d9a2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "48845730-9780-4df4-a83e-e047c6867aa5", "value": "T19804392F358191F0F6411B746BCBD3976C390BBF51A9909F6B416329B6E0B7BA02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "3fe9b4da-3844-4268-b6d6-19635465ee6f", "value": "3072:7mPX5bl7RDfPIX5eG/L1AL0SFU66gOSNL9CnNgRdgJi55wJUXS:7eJpJUVD1A8n0YNgEJi5aqi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777146798, "uuid": "e2eba41f-1946-4195-be56-2c972d610239", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "ec55eb82-930a-47b7-8a1e-5061965e92bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67f97e40-40e0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777146798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "1d61499b-9198-4a45-9f96-9cd82b7b7388", "comment": "Malware payload", "value": "2e9ff9b1313761d9a19cfc6889703a0d", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "37fde1b0-ef86-4f22-b1d3-063ce2102819", "comment": "Malware payload", "value": "5120ac99787720cf3bdb680552ddeccd2c15dc630dc9aafbd5e61cf3cb5e2a7b", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "c32c2ae1-54a2-4ea7-8d85-740cf83e73c8", "value": "T1125182DB0180EB73F65CC54EB7F0B135650AA0835ADF9A48EF90181E8EC5D4C7296F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "76c753ff-d206-40f7-8ce1-132e79eb51e0", "value": "48:q6hIOI2JMIByBbiB89n9uZUcUccvyyQJsnsbwLDhVBKx01rOrhM3I+o:6P2JMeQbiBO9uZSsbwc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777146798, "uuid": "ee6816ed-c50b-488c-ae82-65915a656d5e", "value": 2907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "81f60d41-5a6d-4d3c-90c7-dda5242b8a1e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67fb4a04-40e0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777146798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "cee8c9c3-267f-4c64-b89f-4f42e22205dd", "comment": "Malware payload", "value": "f6f101917edd93297f153217703da70d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "5a9b6d68-ec01-4190-a3bd-bfe471d3254a", "comment": "Malware payload", "value": "499c47b454b1148641b2128aaa8c76d2c7154ec5111662107ccf0109f532bd90", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "9d5bf7ff-50bd-448c-bfb5-3ed8492e8092", "value": "T161631286FFD81FECFCEA27BC07AB61CB2351942550B701A40DD68D89905FEB1518A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "c438ce46-7233-42ba-b8cf-8804b6da3844", "value": "1536:27MbwKNGjjH+Xq34n/q8Zu41zmX3sDg0fM5AHrP1:27Mbp2L+Xqdfoz2s7fMiHrP1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777146798, "uuid": "518bf256-306d-4300-b015-9fe143affdc4", "value": 70860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "3407769b-75fb-447b-bdcd-a2f3d98b9d18", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6800223d-40e0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777146798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "89d1c342-af64-4ed7-a72e-9e704520909a", "comment": "Malware payload (Mirai)", "value": "469af09e2d4afd925ca5aab5bf05e2df", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "462ecc2c-38d6-4472-8da8-0860ec07c966", "comment": "Malware payload (Mirai)", "value": "ec4fafaa08282fe0b90e953cdf682e6d2652b3c18a1a1cce309678ee5468602e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "32e5f334-58e2-4fe8-9c5f-f959ceb3ff03", "value": "T1DB147120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "c9adf187-dc3d-4ac6-b8db-a99791861c59", "value": "3072:IcHZcggt1NJmeDQBwnKUDMaVsb3pjr1lCRJUKG:IcY5JpMByVs9jSAf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777146798, "uuid": "82122f06-a70c-4352-aa34-74bf59222583", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "a8cc8883-d6db-41e2-8a5b-49b8af3682c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6800cab1-40e0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777146798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "627be620-329b-4f06-b47c-cac0128460ab", "comment": "Malware payload (Gafgyt)", "value": "65fc065595e5b4d28ee8f1bac715cc99", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "039e8f98-5d84-41ba-b474-2b11e1ce8b51", "comment": "Malware payload (Gafgyt)", "value": "6ed10f9632ae6934f6abc5315697e1fbd30a246445065083ddf785349e1cfbc0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "d2a75b42-2183-44e9-b1eb-7d4dc6bba754", "value": "T100D3C021E4006DD1EC2129F578BA97B80350EE700BDE1582EFFDF95E647BD9438AD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "a7877482-760f-48c7-8cdf-44a394163ddd", "value": "3072:PnicTtkAg7FSGp+VJE6AqUjq+c7zAbpb9/xe:PiySSGp+PMmT7zMplU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777146798, "uuid": "187bdd07-39b4-4153-b7be-28689cdb3df6", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "b99bd8bd-fd7b-4d0d-b817-0051dd65d67d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68029d20-40e0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777146798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "61a95d61-f16b-4786-a609-3b7ceabda78b", "comment": "Malware payload (Mirai)", "value": "0495d223629ede89bd845394b03d5584", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "c9a678be-d1aa-4b24-a8ba-eeea62ad9d19", "comment": "Malware payload (Mirai)", "value": "2e94b1fc61e5ce5a3b5c478531fd4d91ba1c00ce46317e7115f1f2fa4f5853b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "a1eab1e8-61b4-4f2a-a55b-683c1e83a976", "value": "T1CDB3E085B210AA55C02672FCB1870990D3B27E7B4B9A150B44B3F5B46DBCCD47E0BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "8d75ca92-eda0-4988-8eac-b33f8f5b4f21", "value": "3072:jx63zpjhO5z01nCU375P5wk5SOez7wuj:as5zqhr5Nzy7wg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777146798, "uuid": "35779383-6203-4861-9830-e28beb56555b", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "16e44cc0-5d15-4be9-82cc-c7424857b717", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "680aa0f9-40e0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1777146798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "98de33b5-66fc-4a1f-94db-7d40d9dade34", "comment": "Malware payload (Gafgyt)", "value": "db1e9628f0427bbe0df00f0d60088564", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "fc9d741a-e5fe-4b46-8570-c264bd513264", "comment": "Malware payload (Gafgyt)", "value": "b03141a53cfa7c91ee6cf8d9b9241d0659ceb7867a00ea28de61352babff4e99", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "5d973119-cc09-4297-b331-9c57d7691d16", "value": "T1DAB3AF87B2907ABEF0A45E3FC4135E26A6259F705583273D71FDF9906E3A3503292E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "1be4b982-7ccb-4e7c-aadf-0c3260ec4c92", "value": "1536:tdNSXAeuUGWnKYUqwaJ1Xq/3A5hcB57laZeCNjHWBOdiyWT15Ov6fHzP8rSR:t3SrlGWnKTU83AQB5A5Liy36frUSR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777146798, "uuid": "991015e9-0c5c-4714-b4aa-507e25ed6971", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146798, "uuid": "936b555c-9d5c-492c-a922-8e85d0bbcd6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b840f62-40e0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1777146858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146858, "uuid": "b2fd97e0-47f2-47bc-ba5b-700eb38e4a7e", "comment": "Malware payload (Mirai)", "value": "3c6bdda1f59e40cebf63c756dac90252", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146858, "uuid": "2af08f70-085c-4bb9-8a03-9b92a59c3a3d", "comment": "Malware payload (Mirai)", "value": "ddf69a53ade7d36408dbc4268a146a787994d76ce5296a68db3e47692cbf1474", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146858, "uuid": "7bdd2ff2-5ec2-44bc-84a3-ac38ed10ffb0", "value": "T115C3F185BB6369D1C1A242BDA4C00AC387916E318BE317080699F674387DDFB1F69D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146858, "uuid": "af1eeae6-f645-4a0e-99fc-ab2608f62595", "value": "3072:OBb4K+nqsnSjZldbaUXGSgqTWo1OWqEwztlMMTnY:0OCDjXG9qTWywxlxTnY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777146858, "uuid": "5d27a6ab-3e26-4c65-b00b-a45f8e8d4d23", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146858, "uuid": "6162fd87-c850-48bf-9559-f65588dd24c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b86219c-40e0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777146858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146858, "uuid": "e08591f4-6b55-4684-ab79-77344302740a", "comment": "Malware payload", "value": "664248d9b1ee735312f8921edacbc86f", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146858, "uuid": "95a4d897-74a5-4c63-936d-ad1c22679c73", "comment": "Malware payload", "value": "64d00c63707cf3cc150881ba6fa273ba21cb79fbd7f0bfb1f5cedd75eff0dca8", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146858, "uuid": "4ae75822-4917-453b-b8d5-20a6f3244ce8", "value": "T11A6302CB6EB03B27C0D8A1B270381595CD3ADDCAE283C69D97E2A756473943750C8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146858, "uuid": "68137d9b-ee4d-4c85-b6f1-052a1d86ee3c", "value": "1536:1axZLmYKVDNSl2y08yumeJyGYVmIMGAE8yNg:1axZLmYKX+t08jmeJhYTVPNg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777146858, "uuid": "3131f7d3-b37b-4100-96ca-96e5a81e54e2", "value": 70460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146858, "uuid": "407c8921-b5bc-4967-b0e7-8aecf2fe9ddd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "284f9a3c-40e5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1777148839, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1777148839, "uuid": "189355a9-8898-4a14-8635-748d218b3b59", "comment": "Malware payload", "value": "59349edec2d01e0023d1100ffb264534", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1777148839, "uuid": "cbd26c5e-fdc3-4f6e-b357-d2d2f89a571c", "comment": "Malware payload", "value": "db1e2b7987eabf0eaeb3652b2e1a458e72890f32e6586017363e7566f0a02852", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1777148839, "uuid": "7c45dcc0-ff1a-4e34-aa0c-df1072990a6c", "value": "T1CDC080C70731B51040577C197165116E52875B3038D4CF08F8AD05615E499C0F020B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1777148839, "uuid": "70cf7ed1-c082-4ebb-a6e7-7312aa4c34ae", "value": "3:O22exARg/LCQNLXm3FOdJ2GL9rSY/LCQNLXnBFS/TWUKT6VVI9LJdvvvF:O25y82GLNSnMTT6IZJn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1777148839, "uuid": "a2833b67-3485-46b9-94bc-2bd4f630d16d", "value": 166, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1777148839, "uuid": "4d295915-75fe-4f61-87a0-0ebbad419131", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075289, "uuid": "e95c5c1b-4039-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.189:33797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075328, "uuid": "002987bf-403a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.188.178:39740/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075464, "uuid": "515e8e02-403a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.131.139:50229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075809, "uuid": "1f13e156-403b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://holz-berg-4b.slanikt7ay.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777075941, "uuid": "6e09dd10-403b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.247.88:53177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777076005, "uuid": "93c242b3-403b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.189:33797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777076049, "uuid": "ae429b80-403b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-9.slanikt7ay.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777076063, "uuid": "b658752a-403b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.219.74.28:58121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777076120, "uuid": "d85a944e-403b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.96.251:57346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777076428, "uuid": "904588d2-403c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.14.191.107:51471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777076527, "uuid": "cb56c658-403c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.162.21:53945/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777076534, "uuid": "cf7c6b36-403c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-zeit-5k.cicada-tkacki.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777076780, "uuid": "61f82f81-403d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.212.173:36311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777076890, "uuid": "a33ba44b-403d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-2.cicada-tkacki.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777076952, "uuid": "c8382bd6-403d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.228.183:52285/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777077127, "uuid": "30fccfe1-403e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.243.46:34642/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777077128, "uuid": "31392329-403e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.243.46:34642/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777077138, "uuid": "377e732b-403e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.131.139:50229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777077247, "uuid": "78273eae-403e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kalt-wald-8.cicada-tkacki.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777077427, "uuid": "e34a524a-403e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.188.178:39740/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777077549, "uuid": "2c36ab00-403f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bleu-4.cicada-tkacki.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777077909, "uuid": "02b505f0-4040-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-mond-9z.cicada-tkacki.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777078035, "uuid": "4e30c2f2-4040-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.212.173:36311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777078155, "uuid": "9576ff08-4040-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.14.191.107:51471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777078276, "uuid": "dd6f6752-4040-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.228.183:52285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777078326, "uuid": "fb94c368-4040-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://haus-1.cicada-tkacki.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777078629, "uuid": "afb7184c-4041-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.155.75:53575/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777078690, "uuid": "d470bf62-4041-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iron-star-2n.caissonnarc0m.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777079167, "uuid": "f06bdd05-4042-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rouge-6.caissonnarc0m.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777079648, "uuid": "0f1ded93-4044-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-land-4.caissonnarc0m.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777080077, "uuid": "0f49b0ab-4045-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.175.139:50283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777080370, "uuid": "bde26d34-4045-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-7.caissonnarc0m.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777080427, "uuid": "df7c3c26-4045-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.155.75:53575/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777080553, "uuid": "2aac4cd6-4046-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://petit-berg-5p.caissonnarc0m.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777080620, "uuid": "52a57137-4046-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.192.63:44606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777080726, "uuid": "922bdec6-4046-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.236.89:43826/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777080727, "uuid": "9293c96f-4046-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.236.30:39536/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777080909, "uuid": "fece9c1b-4046-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-3.caissonnarc0m.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777081272, "uuid": "d7979989-4047-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-fire-8x.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777081447, "uuid": "3fdc6f20-4048-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/rupa9495/youtube-hide-low-views-videos/refs/heads/main/chelide/videos-hide-youtube-views-low-v2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777081448, "uuid": "3ffd74ad-4048-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/rupa9495/rupa9495.github.io/raw/refs/heads/main/pterotheca/io-rupa-github-1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777081451, "uuid": "41f7e1b6-4048-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/rupa9495/rupa9495.github.io/refs/heads/main/pterotheca/io-rupa-github-1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777081452, "uuid": "4261d11f-4048-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/rupa9495/n8n-mt5-fetch/refs/heads/main/telluriferous/fetch_n_mt_v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777081452, "uuid": "427ab5c5-4048-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/rupa9495/n8n-mt5-fetch/raw/refs/heads/main/telluriferous/fetch_n_mt_v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777081453, "uuid": "42f52924-4048-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/rupa9495/youtube-hide-low-views-videos/raw/refs/heads/main/chelide/videos-hide-youtube-views-low-v2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777081627, "uuid": "aaacd2a8-4048-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zeit-1.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777081874, "uuid": "3e0604f9-4049-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://holz-baum-4.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777082116, "uuid": "ce80068e-4049-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.96.21:44279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777082230, "uuid": "122411a7-404a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-6.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777082527, "uuid": "c33577a3-404a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.236.30:39536/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777082772, "uuid": "55a2339d-404b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-land-9c.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777082828, "uuid": "76ed40ef-404b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.173.162:58261/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777082959, "uuid": "c4add50f-404b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.79.203:53696/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777083426, "uuid": "db5b3d29-404c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.135.20:57842/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777083438, "uuid": "e26ebd4f-404c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.102.64:60145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777083670, "uuid": "6c8dd391-404d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-2.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777083873, "uuid": "e5afab5c-404d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.96.21:44279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777083969, "uuid": "1f2ba832-404e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dsf2.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777084326, "uuid": "f3b647d4-404e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.0.110:40737/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777084392, "uuid": "1ab79b9f-404f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dffer.excavat-toponym.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777084460, "uuid": "4362f460-404f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.49.55:51294/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777084579, "uuid": "8aa3aa52-404f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.54.92:51141/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777084690, "uuid": "ccad04c2-404f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.158.9:40513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777084991, "uuid": "8053736d-4050-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solafirmw.miv7sorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777085227, "uuid": "0cac8afd-4051-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tri-fluxa.miv7sorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777085529, "uuid": "c0ad2066-4051-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.79.131:51284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777085530, "uuid": "c151374c-4051-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://basicret.miv7sorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777085598, "uuid": "e9d17282-4051-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.111.43:34495/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777085946, "uuid": "b97f7354-4052-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bark-line.miv7sorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777086127, "uuid": "255a449d-4053-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.160.63:40377/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777086128, "uuid": "257d8bff-4053-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.41.142:43689/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777086312, "uuid": "93343748-4053-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.92.90:36640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777086443, "uuid": "e1c683ae-4053-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.160.63:40377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777086608, "uuid": "43aafd9c-4054-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://surv3y7-plate.miv7sorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777086669, "uuid": "6843b1fe-4054-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.79.131:51284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777086786, "uuid": "adfe05ea-4054-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://growthcircui.miv7sorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777086801, "uuid": "b6c6018e-4054-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/g.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777087450, "uuid": "39dbd516-4056-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://segmentash.dex3lavan.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777087628, "uuid": "a3c53a8d-4056-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tracesound.dex3lavan.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777087694, "uuid": "cb033ffb-4056-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.111.43:34495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777087927, "uuid": "565521e4-4057-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.93.100:60469/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777087928, "uuid": "56d8a340-4057-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.152.103:48977/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777088288, "uuid": "2d0d3686-4058-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://norspireos3.dex3lavan.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777088300, "uuid": "345936da-4058-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.92.90:36640/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777088467, "uuid": "97e02e7c-4058-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jz8ef5.dex3lavan.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777089008, "uuid": "da9a18f5-4059-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://svvift5-trace.dex3lavan.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777089128, "uuid": "21db1951-405a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-str34m.dex3lavan.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777089321, "uuid": "951043f1-405a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.221.106:49379/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777089498, "uuid": "fea024bf-405a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.9.170:40666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777089547, "uuid": "1b767d7d-405b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://publish2-mount.bexla9rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777089622, "uuid": "483ce8e8-405b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.25.159:45414/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777089794, "uuid": "aea0a22f-405b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.8.191:51528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777089859, "uuid": "d5565d53-405b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.73.206:51685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777089909, "uuid": "f321389c-405b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorforge7al.bexla9rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777090208, "uuid": "a5c34ca0-405c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://theormot.bexla9rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777090452, "uuid": "36d84c37-405d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.8.191:51528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777090568, "uuid": "7bf0d46c-405d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://echoloa.bexla9rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777090748, "uuid": "e79d0b2f-405d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.221.106:49379/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777090928, "uuid": "529964e9-405e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.153.219:59618/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777090928, "uuid": "52bec7c4-405e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.153.219:59618/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777091286, "uuid": "28219a7e-405f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://canopystor.bexla9rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777091303, "uuid": "323df1a5-405f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.73.206:51685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777091529, "uuid": "b9345d4c-405f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://7fsk.bexla9rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777092131, "uuid": "1fafc3b3-4061-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://passiv-reage.qiv2moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777092428, "uuid": "d094e712-4061-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gf2rfd.qiv2moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777092672, "uuid": "625bce1b-4062-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.55.10:34700/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777092972, "uuid": "14cd52b1-4063-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cultureengine.qiv2moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777093153, "uuid": "80d2445e-4063-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://motif4-vector.qiv2moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777093452, "uuid": "33102983-4064-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ollowgl.qiv2moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777093629, "uuid": "9c72476d-4064-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.9.183:39731/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777093634, "uuid": "9f9debd3-4064-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.242.7:53385/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777093699, "uuid": "c68c468e-4064-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.51.75:39797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777093819, "uuid": "0dc64401-4065-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.164.103:51383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777093882, "uuid": "33b4035f-4065-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.93.131:44560/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777093994, "uuid": "76324e1f-4065-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://audittiny.qiv2moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777094244, "uuid": "0b4cf9bf-4066-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.55.10:34700/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777094304, "uuid": "2ee4a38b-4066-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.154.59:56376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777094528, "uuid": "b45629ec-4066-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.65.241:38418/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777094533, "uuid": "b7a68fdb-4066-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://72z5.zex8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777095126, "uuid": "190fff40-4068-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.242.7:53385/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777095193, "uuid": "40dd02e7-4068-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorcrestix.zex8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777095263, "uuid": "6ad270bb-4068-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.51.75:39797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777095374, "uuid": "ac899627-4068-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kkdho.zex8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777095428, "uuid": "ccc24e1a-4068-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.93.100:60469/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777095428, "uuid": "cd1f5ce0-4068-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.115.109:59924/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777095794, "uuid": "a7036aba-4069-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-n3uron.zex8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777096027, "uuid": "32286a14-406a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.65.121:37827/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777096394, "uuid": "0c79eef9-406b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultra-f1rmvva.zex8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777096458, "uuid": "32d45736-406b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.68.195:49238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777096627, "uuid": "9768919e-406b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.65.121:37827/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777096882, "uuid": "2fa33843-406c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.217:60898/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777096927, "uuid": "4a7eb9ff-406c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.115.109:59924/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777096932, "uuid": "4d75c7b6-406c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyn-tideis.zex8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777097173, "uuid": "dd4dc00a-406c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://starwinter.rax4pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777097302, "uuid": "2a239f17-406d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.26.130:41764/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777097424, "uuid": "729fcbbd-406d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.6.29:39779/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777097474, "uuid": "90393930-406d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vellithal3.rax4pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777097791, "uuid": "4d65c6c5-406e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.65.184:35247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098014, "uuid": "d27c7141-406e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://jkdraj.rax4pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098127, "uuid": "15815e06-406f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.18:49147/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098141, "uuid": "1e14da88-406f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.92.37:49020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098371, "uuid": "a6daa558-406f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://forrn7-panel.rax4pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098500, "uuid": "f417d3b9-406f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.217:60898/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098727, "uuid": "7b892dde-4070-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.18:49147/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777098981, "uuid": "129dc90e-4071-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.92.37:49020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777099041, "uuid": "36b63ef8-4071-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.6.29:39779/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777099161, "uuid": "7e2078be-4071-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.26.130:41764/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777099209, "uuid": "9aea0407-4071-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://falforma.rax4pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777099328, "uuid": "e1b7e5af-4071-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.48.249:35117/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777099512, "uuid": "4f018bcd-4072-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sernexor8.rax4pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777099524, "uuid": "566d9cc4-4072-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:35646/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777099867, "uuid": "229756bc-4073-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorlithen4.sylo6mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777100167, "uuid": "d5d8226d-4073-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://argrs.sylo6mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777100239, "uuid": "005b0c1b-4074-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.254.196:37368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777100290, "uuid": "1f3562d4-4074-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.245.43.20:44856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777100475, "uuid": "8d189d00-4074-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://25eap9f.sylo6mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777100528, "uuid": "ad07f10e-4074-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.20.70:59383/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777100890, "uuid": "84d4c6dd-4075-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gentl-snow.sylo6mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777101077, "uuid": "f446d467-4075-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:35646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777101131, "uuid": "145af3ee-4076-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://amber-mon.sylo6mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777101310, "uuid": "7f0812bb-4076-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.68.158:60898/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777101617, "uuid": "35b2a5a0-4077-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.189.110:58179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777101673, "uuid": "574d204f-4077-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.254.196:37368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777101727, "uuid": "77c1f724-4077-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.20.70:59383/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777101787, "uuid": "9b3e0123-4077-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hdf358xa.sylo6mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777102027, "uuid": "2a1c9086-4078-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.172.154:47368/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777102027, "uuid": "2a39fd1c-4078-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.172.154:47368/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777102266, "uuid": "b8f998a5-4078-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://server-scar.to9varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777102332, "uuid": "e03ec54b-4078-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.245.43.20:44856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777102449, "uuid": "25c92b4b-4079-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://atomicextract.to9varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777102627, "uuid": "8fa2cffa-4079-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.30.103.84:49403/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777102688, "uuid": "b40941df-4079-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rntfvps.to9varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777102822, "uuid": "0434192d-407a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.171.186:55820/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777103048, "uuid": "8ad81e34-407a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bytefore.to9varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777103349, "uuid": "3dfeeea8-407b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-cornput.to9varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777103359, "uuid": "443c6d8a-407b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.102.64:60145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777103712, "uuid": "16c7a54f-407c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ash-leaf.to9varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777103725, "uuid": "1e4207af-407c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.237.36.79:60398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777103725, "uuid": "1e92ebc4-407c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.25.197:47652/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777103826, "uuid": "5addc5a4-407c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.30.103.84:49403/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777103827, "uuid": "5b5c6a42-407c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.115.249:43421/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777103949, "uuid": "a3b4e862-407c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.68.158:60898/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777104015, "uuid": "caf4f0ba-407c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://inkraven.kymle1rax.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777104256, "uuid": "5a9e03f5-407d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:41070/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777104368, "uuid": "9dade562-407d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tercheck.kymle1rax.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777104500, "uuid": "ec5b6806-407d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.171.186:55820/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777104666, "uuid": "4f754830-407e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thick8-signal.kymle1rax.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777104681, "uuid": "581cfda8-407e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.105.63:46173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777105037, "uuid": "2c3b335b-407f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.25.197:47652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777105037, "uuid": "2c6cf201-407f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.147.59:56819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777105098, "uuid": "50e745fe-407f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.80.228:58866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777105099, "uuid": "512dbbd9-407f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.35.6:56743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777105208, "uuid": "9271246c-407f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://veltide4a.kymle1rax.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777105215, "uuid": "967ecff7-407f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.63.81:45807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777105328, "uuid": "d9999144-407f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.128.162:46639/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777105330, "uuid": "dadbba2c-407f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.134.57.165:36781/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777105340, "uuid": "e0cec955-407f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.4.7:43447/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777105574, "uuid": "6c85d401-4080-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-1c3.kymle1rax.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777105627, "uuid": "8bd14ff4-4080-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.134.57.165:36781/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777105865, "uuid": "19f535bf-4081-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://emidb.kymle1rax.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777106178, "uuid": "d4b62996-4081-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.46.144:60399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777106229, "uuid": "f2990e8c-4081-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://atom1-span.nov3liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777106294, "uuid": "19df69af-4082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.35.6:56743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777106417, "uuid": "6339b2a1-4082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.12.231:54760/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777106423, "uuid": "668f194e-4082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.200.193:39279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777106432, "uuid": "6bbc28f4-4082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.21.104.230:48945/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777106474, "uuid": "85060c4e-4082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.46.144:60399/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777106539, "uuid": "abaedfd5-4082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.187.102:55571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777106588, "uuid": "c8d69796-4082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vor-spireos.nov3liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777106720, "uuid": "17c332b7-4083-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.55.10:48752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777106959, "uuid": "a5c9a004-4083-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.4.7:43447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777106959, "uuid": "a601628c-4083-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.115.191:52881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777107201, "uuid": "365c2a85-4084-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.63.81:45807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777107261, "uuid": "59f9ad7c-4084-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.43.154.49:51489/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777107440, "uuid": "c466d296-4084-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.227.183.124:56316/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777107489, "uuid": "e1c386b7-4084-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://serven5um.nov3liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777107680, "uuid": "53c46c6c-4085-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.200.193:39279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777107727, "uuid": "6febbe4c-4085-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.138.0.30:56104/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777107800, "uuid": "9b174ee1-4085-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.227.183.124:56316/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777107849, "uuid": "b868b534-4085-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.234.127:37711/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777107851, "uuid": "b9a02bd9-4085-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.202.1:44669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777107967, "uuid": "fe8b6e90-4085-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://springledg.nov3liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777108224, "uuid": "9803b1f8-4086-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.21.104.230:48945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777108268, "uuid": "b222ad94-4086-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clust1-dock.nov3liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777108422, "uuid": "0e4233f5-4087-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.127.74:36024/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777108520, "uuid": "487d0b45-4087-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.187.33.117:42869/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777108687, "uuid": "abf2ca1e-4087-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://systelaun.nov3liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777108926, "uuid": "3ab31266-4088-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.128.162:46639/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777108927, "uuid": "3ae4db5d-4088-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.166.28.113:60224/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777108927, "uuid": "3b2d5143-4088-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.193.168:32803/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109049, "uuid": "83e7bf73-4088-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://84gxvrtf.miv7sorel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109113, "uuid": "a9a23088-4088-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.127.74:36024/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109239, "uuid": "f4b31402-4088-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.43.154.49:51489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109347, "uuid": "353fb39e-4089-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://conv3r5-glow.dex3lavan.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109417, "uuid": "5f5eafcd-4089-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.63.19.19/i.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109418, "uuid": "5fe7f939-4089-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.174.15:59692/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109533, "uuid": "a412a265-4089-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.63.19.19/vca2", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109535, "uuid": "a54d4bb1-4089-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.34.82.55:6173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109536, "uuid": "a5d8510f-4089-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.63.19.19/vc2", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109826, "uuid": "52e243a5-408a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.166.28.113:60224/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109826, "uuid": "52fd50b9-408a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.193.168:32803/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777109826, "uuid": "53068f96-408a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.138.0.30:56104/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777110324, "uuid": "7bb1615f-408b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.35.240:36050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777110371, "uuid": "978c6de9-408b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://focusflame.bexla9rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777110379, "uuid": "9c6356e0-408b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.195.93:42238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777110549, "uuid": "01e90c15-408c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dpcr.qiv2moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777110621, "uuid": "2cc8fe06-408c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.105.170:35252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777110729, "uuid": "6d5827bb-408c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.234.181:44418/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777110788, "uuid": "903c75cb-408c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mossphoto.zex8liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777111089, "uuid": "43f42132-408d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trigg-crest.rax4pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777111508, "uuid": "3db2b4c5-408e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bytehard.sylo6mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777111753, "uuid": "cfab2728-408e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.34.82.55:6173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777111868, "uuid": "13d6171b-408f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://firmwa7-point.to9varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777111929, "uuid": "384fb922-408f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.65.40:53613/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777111930, "uuid": "38cfd632-408f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.124.253:60921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777111930, "uuid": "392d4dcf-408f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.18.127:47051/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777112122, "uuid": "ab6f97c9-408f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.189.4.192:59572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777112230, "uuid": "ebe27820-408f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rockconvoy.kymle1rax.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777112527, "uuid": "9cae5cc6-4090-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.234.181:44418/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777112709, "uuid": "09376393-4091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://valehar.nov3liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777113023, "uuid": "c421324e-4091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.124.253:60921/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777113070, "uuid": "e04528e5-4091-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fjtx.miv4soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777113127, "uuid": "027e3abb-4092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.34.102:36508/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777113186, "uuid": "25d8787b-4092-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.65.40:53613/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777113670, "uuid": "46524422-4093-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-inv0ice.miv4soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777113857, "uuid": "b5cd541f-4093-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.79.203:53696/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777113911, "uuid": "d5c43397-4093-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sknrzs3z.miv4soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777113921, "uuid": "db665003-4093-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.111.157:33904/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777114211, "uuid": "8894c69b-4094-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gpfour4.miv4soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777114282, "uuid": "b29496f9-4094-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.202.1:44669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777114339, "uuid": "d4bf70c3-4094-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.18.127:47051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777114513, "uuid": "3c92f6ed-4095-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sermarkos.miv4soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777114699, "uuid": "ab90aa04-4095-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.111.157:33904/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777114872, "uuid": "12b482dd-4096-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://validatorgri.miv4soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777114927, "uuid": "3329f28d-4096-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.247.51:48269/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777115061, "uuid": "836524c3-4096-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.110.229:36974/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777115471, "uuid": "775ed010-4097-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://summiceda.dex7lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777115603, "uuid": "c63f56e9-4097-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.174.101.30:42526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777115653, "uuid": "e3f10c01-4097-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://del1v-graph.dex7lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777115782, "uuid": "30caa0b4-4098-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.94.31.79:52659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777116254, "uuid": "4a40c678-4099-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mer-meshis.dex7lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777116392, "uuid": "9cb19365-4099-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.191.197:60641/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777116444, "uuid": "bb469bf3-4099-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.11.84:52331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777116492, "uuid": "d83b8d6a-4099-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelcoreos9.dex7lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777116564, "uuid": "031ea1b7-409a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.1.138:33054/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777116625, "uuid": "2747bd19-409a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.219.120:53137/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777116849, "uuid": "aceaa931-409a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kel-marken.dex7lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117040, "uuid": "1ebd4054-409b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.191.197:60641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117041, "uuid": "1f101bdd-409b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.94.31.79:52659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117217, "uuid": "883aabb7-409b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.174.101.30:42526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117276, "uuid": "ab2572ca-409b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.123.148:55020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117509, "uuid": "362d6e38-409c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://workersolar.dex7lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117627, "uuid": "7cc1826b-409c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.25.33:54885/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117748, "uuid": "c4f8bc85-409c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://planrec.bexla2rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117892, "uuid": "1a4eba82-409d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.123.148:55020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777117928, "uuid": "2fc47cd5-409d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.25.33:54885/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777118123, "uuid": "a3f6fa86-409d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.4.51:33994/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777118293, "uuid": "09908de3-409e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://f0cu-grid.bexla2rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777118481, "uuid": "79ad6ca8-409e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.5.254:37929/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777118534, "uuid": "9915c3ff-409e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://colocip.bexla2rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777118539, "uuid": "9c235061-409e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.82.187:36437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777118770, "uuid": "25a7e033-409f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.70.48:33361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777118831, "uuid": "4a5b1164-409f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bundleform.bexla2rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777119079, "uuid": "de5270c3-409f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.213.182:59660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777119188, "uuid": "1ecd598d-40a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fl4rn2-phase.bexla2rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777119442, "uuid": "b67cb8df-40a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.4.51:33994/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777119448, "uuid": "ba1903cd-40a0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.141:59340/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777119789, "uuid": "851f66b1-40a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://eamo.bexla2rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777119862, "uuid": "b0ce4499-40a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.185.163:55674/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777119922, "uuid": "d4cd859c-40a1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.213.182:59660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120027, "uuid": "134375ac-40a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.177.203:54843/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120153, "uuid": "5e4d6900-40a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.11.84:52331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120154, "uuid": "5e889f26-40a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.119.134:38587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120154, "uuid": "5e8fa9db-40a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.184.85:50276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120227, "uuid": "8a4be713-40a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.1.98:49817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120388, "uuid": "ea7111d1-40a2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://boostmanifest.qiv9moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120461, "uuid": "15bc4965-40a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.217.179:35292/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120462, "uuid": "166995b2-40a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.1.98:49817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120626, "uuid": "786b271e-40a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.177.203:54843/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120636, "uuid": "7e4d874b-40a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.184.85:50276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120747, "uuid": "c04b506c-40a3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://6z3dyra.qiv9moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777120986, "uuid": "4ef378f3-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.39.101.43:34482/auth-token/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121046, "uuid": "72427522-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.75.200.17:3527/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121046, "uuid": "7253a020-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.209:46771/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121047, "uuid": "72df7f5d-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.82.57:33238/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121047, "uuid": "72ed44ca-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.247.238.59:52497/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121047, "uuid": "732986f0-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.178.17:48068/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121047, "uuid": "73425576-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.229.155.219:44573/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121047, "uuid": "73602bf9-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.202.67:60383/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121048, "uuid": "739df5cc-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.234.103:37644/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121048, "uuid": "73b9a3cf-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.70.211:44943/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121048, "uuid": "73b9aedd-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.90.25:44627/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121048, "uuid": "73d20679-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.229.155.219:44573/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121050, "uuid": "752bd2b5-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.45.75.54:53107/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121109, "uuid": "9829361e-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.225.163.226:45102/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121111, "uuid": "99535c01-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.213.254:45300/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121111, "uuid": "9960ae4d-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.153.224:35024/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121111, "uuid": "996d1c13-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.49.55:51294/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121111, "uuid": "99779d19-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.164.128.58:46877/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121111, "uuid": "997f3ff0-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.107.30:54617/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121111, "uuid": "997fc34e-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.200.254:40712/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121111, "uuid": "9985fd95-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.115.249.127:34705/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121112, "uuid": "999662ee-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.254.123:57455/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121112, "uuid": "999f15a4-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.173.89.126:52537/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121112, "uuid": "99a49566-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.200.254:40712/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121112, "uuid": "99bcb603-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.243.64.135:38200/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121112, "uuid": "99c1453f-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.93.84:55453/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121112, "uuid": "99da9e4b-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.237.178:49783/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121112, "uuid": "99dee9b1-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.10.39.242:54463/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121112, "uuid": "99e8f5a0-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.81.160:44314/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121122, "uuid": "9fdd9756-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.200.221.163:37254/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121169, "uuid": "bb98aaf7-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.170.136.155:50493/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121170, "uuid": "bc3f7260-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.11.169:60904/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121170, "uuid": "bc42206b-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.170.136.155:50493/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121170, "uuid": "bc800f3f-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.21.29.140:52069/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121170, "uuid": "bc91d9c0-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.102.128.38:46412/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121170, "uuid": "bc9443b4-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.89.61:40934/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121170, "uuid": "bcaa3d59-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.25.235:52554/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121171, "uuid": "bcc8cb95-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.24.104.224:40553/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121171, "uuid": "bcd3e75c-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.12.80:33543/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121171, "uuid": "bce244bc-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.153.230:50437/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121171, "uuid": "bce8e353-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.24.104.224:40553/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121171, "uuid": "bd079e85-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.150.124.67:51450/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121171, "uuid": "bd0a4222-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.17.20:57547/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121173, "uuid": "be64b962-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.60.85.181:52740/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121227, "uuid": "de7294cd-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.225.163.226:45102/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121229, "uuid": "dfc7a5f8-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.92.130.154:39913/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121230, "uuid": "e04b6b21-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.234.103:37644/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121230, "uuid": "e05da6b0-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.243.64.135:38200/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121230, "uuid": "e05de92e-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.187.102:55571/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121230, "uuid": "e05e4094-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.11.169:60904/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121230, "uuid": "e068a495-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.149.107.54:58302/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121230, "uuid": "e06c844e-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.37.19.74:34549/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121231, "uuid": "e09323bd-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.25:37443/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121231, "uuid": "e09331f6-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.202.67:60383/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121231, "uuid": "e0a32ce2-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.198.178.17:48068/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121231, "uuid": "e0a4a9e7-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.214.87:39540/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121231, "uuid": "e0be58a9-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.165.86:37724/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121231, "uuid": "e0e41913-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.140.90:50750/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121231, "uuid": "e0f8044e-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.255.229:43909/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121231, "uuid": "e0f8908d-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.103.96:33562/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121231, "uuid": "e0ff6811-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.24.129:57363/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121232, "uuid": "e11f539a-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.16.164.144:36113/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121247, "uuid": "ea323c0d-40a4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.23.132.93:9612/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121289, "uuid": "035c9df0-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.30.145.245:33836/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121290, "uuid": "04174a3c-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.109.102:54217/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121290, "uuid": "041cf5e5-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.110.57:36761/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121290, "uuid": "041ec912-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.48.151:59180/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121290, "uuid": "042969b5-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.93.84:55453/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121290, "uuid": "04363149-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.254.123:57455/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121291, "uuid": "044086c8-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.120.210:46322/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121291, "uuid": "04409117-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.12.80:33543/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121291, "uuid": "044680cc-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.215.185.216:53633/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121291, "uuid": "044891af-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.165.86:37724/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121291, "uuid": "044a9df9-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.32.65.48:39960/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121291, "uuid": "045b16bf-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.242.181:54229/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121291, "uuid": "045f7538-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.45.245:38847/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121291, "uuid": "046453fa-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.251.7:45895/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121291, "uuid": "0475be42-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.251.7:45895/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121291, "uuid": "048d5a07-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.245.43.153:59147/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121349, "uuid": "26fb2205-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3nzy-layer.qiv9moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121350, "uuid": "27a24195-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.60.85.181:52740/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121531, "uuid": "93aeab93-40a5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sng2kb.qiv9moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121769, "uuid": "2198589a-40a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quormesh1os.qiv9moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777121832, "uuid": "47492e8e-40a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.79.84:34880/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777122070, "uuid": "d4e04d78-40a6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.214.246:44153/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777122198, "uuid": "20f2c57b-40a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.217.179:35292/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777122263, "uuid": "47a098d7-40a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.102.151:37629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777122308, "uuid": "6283d2a1-40a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://4wjh4hoo.qiv9moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777122381, "uuid": "8e459409-40a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.70.48:33361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777122488, "uuid": "ce0558d9-40a7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://publishbark.zex3liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777122729, "uuid": "5dd9eec0-40a8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velmesh7ix.zex3liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777123037, "uuid": "154ef3a3-40a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.200.228:43104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777123148, "uuid": "575e64d6-40a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorforgeet6.zex3liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777123403, "uuid": "ef758551-40a9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.200.228:43104/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777123569, "uuid": "524a882c-40aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tr4ck7-plate.zex3liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777123626, "uuid": "74880796-40aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.41.142:43689/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777123626, "uuid": "748c7860-40aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.26.85.56:53461/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777123691, "uuid": "9b053e14-40aa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.119.134:38587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124062, "uuid": "781fde0a-40ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.102.151:37629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124228, "uuid": "db0b4392-40ab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pixe2-zone.zex3liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124468, "uuid": "6a122f49-40ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://f4ct0ry-mark.zex3liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124482, "uuid": "724e5683-40ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.175.139:50283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124527, "uuid": "8d4aa2d9-40ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.26.85.56:53461/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124533, "uuid": "9130453c-40ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.227.160:60172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124664, "uuid": "df00c225-40ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.164/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124664, "uuid": "df022377-40ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.164/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124664, "uuid": "df02975f-40ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.164/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124665, "uuid": "df65b48b-40ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.227.160:60172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124717, "uuid": "fe668a7d-40ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.164/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124717, "uuid": "fe6a59d7-40ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.164/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124717, "uuid": "fe6a756e-40ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.164/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124717, "uuid": "fe81476c-40ac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.164/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124720, "uuid": "002dcdba-40ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.164/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124720, "uuid": "002dd12c-40ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.164/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124774, "uuid": "204cb709-40ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.164/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777124774, "uuid": "204fed6a-40ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://204.76.203.164/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777125128, "uuid": "f3575540-40ad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorlineex.rax5pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777125194, "uuid": "1ad65d10-40ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.79.84:34880/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777125311, "uuid": "60990055-40ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://m17e.rax5pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777125322, "uuid": "66f548f2-40ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.213.140.201:60251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777125428, "uuid": "a655a715-40ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.143.46:57984/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777125437, "uuid": "ac08d025-40ae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.233.8:41837/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777125609, "uuid": "1269b1da-40af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://formtrai.rax5pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777125970, "uuid": "e9b08c43-40af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rain-line.rax5pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777125971, "uuid": "ea398655-40af-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.183.173:44836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777126277, "uuid": "a0398ba7-40b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://campa-fla.rax5pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777126397, "uuid": "e81d1cab-40b0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.234.2:39396/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777126458, "uuid": "0c1d2f28-40b1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.183.173:44836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127235, "uuid": "db3ec889-40b2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://l1ch-mesh.rax5pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127416, "uuid": "47817117-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.129.6:52702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127472, "uuid": "687b11c7-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dealparc.sylo8mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127480, "uuid": "6d8e7dc2-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.114.96/n2/lterouter", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127541, "uuid": "920b5797-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.114.96/n2/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127541, "uuid": "920ef1d9-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.114.96/n2/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127647, "uuid": "d100eae1-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/dlr.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wraith-scan", "colour": "#786c14", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127647, "uuid": "d100f2b1-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/dlr.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wraith-scan", "colour": "#786c14", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127647, "uuid": "d1010113-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/main_mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wraith-scan", "colour": "#786c14", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127648, "uuid": "d15d0a41-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.247.105/iran.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wraith", "colour": "#0acb31", "exportable": true, "hide_tag": false }, { "name": "x86_64", "colour": "#8e3094", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127648, "uuid": "d1888a8a-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.197/mipsel", "Tag": [ { "name": "wraith-scan", "colour": "#786c14", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127652, "uuid": "d3ff4a5b-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Puscasupaul01/Wallet-Hunter/blob/main/unchastised/Hunter-Wallet-v3.0.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127652, "uuid": "d400010b-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/errorm19/Roblox-Blox-Fruits-Script/blob/main/pelf/Roblox-Blox-Fruits-Script-v2.8.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127655, "uuid": "d5cededf-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ledger.eu.com/Ledger-live-wallet.dmg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127655, "uuid": "d5cee196-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Puscasupaul01/Wallet-Hunter/raw/refs/heads/main/unchastised/Hunter_Wallet_cockshut.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127655, "uuid": "d5d071b8-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/OJB2017/VectorFusion/main/src/Vector_Fusion_v1.7.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127655, "uuid": "d5d85917-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cl.distritovagas.com/hte.hta", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127656, "uuid": "d62421cb-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/tphuc7639/Chop-Your-Tree-Script/raw/refs/heads/main/endermatic/ScriptTreeYourChop-1.8-beta.5.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127656, "uuid": "d63a3875-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/duroypogi/Gann-Master-3D/raw/refs/heads/main/perichondritis/Master_D_Gann_2.9.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127656, "uuid": "d64335df-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/tphuc7639/Chop-Your-Tree-Script/raw/refs/heads/main/endermatic/Your_Script_Tree_Chop_3.2.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127657, "uuid": "d6c16cc7-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/duroypogi/Gann-Master-3D/raw/refs/heads/main/perichondritis/Gann-D-Master-v3.0-beta.5.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127657, "uuid": "d6e1fa2a-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Reency/Blox-Fruits/raw/refs/heads/main/regardance/BloxFruits_1.0-alpha.4.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127657, "uuid": "d6e40994-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/OJB2017/VectorFusion/raw/refs/heads/main/assets/VectorFusion_aplanospore.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127657, "uuid": "d6f90f0e-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/anantbhardwaj828/cursor-free-vip/raw/refs/heads/main/electron/vip-free-cursor-v2.3.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127657, "uuid": "d709d5e4-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/anantbhardwaj828/cursor-free-vip/main/assets/cursor_free_vip_1.8.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127665, "uuid": "dbfc233f-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Scriptez1/RedXFreeSteamInstaller/releases/download/v2.4.4/RedX_Setup.exe", "Tag": [ { "name": "BlankGrabber", "colour": "#f1c814", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127668, "uuid": "dd7e687d-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ledger.eu.com/ledger-live-desktop.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127714, "uuid": "f8a7432d-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ledger.eu.com/Ledger-wallet.AppImage", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127720, "uuid": "fc474a25-40b3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.249.125.147/mpsl", "Tag": [ { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127727, "uuid": "00ebec05-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/dlr.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wraith-scan", "colour": "#786c14", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127728, "uuid": "0113f9ef-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.39.101.43:34482/auth-token/c", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127728, "uuid": "0146fdff-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.39.101.43:34482/auth-token/f", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127728, "uuid": "015f412c-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.249.125.147/arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127728, "uuid": "01615519-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.39.101.43:34482/auth-token/e", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "019ae68c-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.247.105/iran.armv5l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "019ae7ca-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/dlr.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wraith-scan", "colour": "#786c14", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "01a73628-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.247.105/iran.sparc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "01be04ea-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.39.101.43:34482/auth-token/j", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "0215ce6a-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "02168360-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.247.105/iran.armv7l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "02218672-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.247.105/iran.armv4l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "0224e6e1-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.247.105/iran.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "02260009-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i486", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "022718fc-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.247.105/iran.armv6l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "02278457-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "0227c526-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127729, "uuid": "02282dc2-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "02451c35-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.247.105/iran.powerpc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "02451cd8-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "02475c3d-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.247.105/iran.mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "02495716-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "024bdf9c-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.39.101.43:34482/auth-token/b", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "027d597a-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "0285167e-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.249.125.147/arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "02866356-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.247.105/iran.mipsrouter", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "02a2fa1c-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "02aca8ab-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.39.101.43:34482/auth-token/m", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "02b79925-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127730, "uuid": "02bab7ae-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.249.125.147/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127732, "uuid": "035f8c09-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/koteshwr-ra/linux-mac/main/image/common/overlay/etc/linux_mac_hacker.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127732, "uuid": "03b96958-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Abdulmejid/DesktopLEDSync/main/providers/Desktop_LED_Sync_v3.3.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127732, "uuid": "03e51aff-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/EliasXII/NullByte/raw/refs/heads/main/docs/assets/Byte_Null_v3.0-beta.4.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "0430daa3-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/loeyyyyy/AI-Voice-Changer-Real-Time-2026/raw/refs/heads/main/cpp/de/jurihock/voicesmith/plug/Time-Changer-Real-A-Voice-3.4.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "0445c2fe-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/astriefaw/animo-app/raw/refs/heads/master/gradle/animo_app_v1.2.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "04486025-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.247.105/iran.i486", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "044f8b93-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/poetic-macroglia442/openclaw-desktop-launcher/raw/refs/heads/main/StartOpenClawLauncher/Services/launcher_desktop_openclaw_v3.8-beta.2.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "044fa94d-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Memet-Jo/trading/raw/refs/heads/main/sylphlike/Software_1.0.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "044face3-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sb090/tauri-plugin-macos-fps/main/examples/fps-diag/src-tauri/capabilities/plugin_macos_fps_tauri_2.4.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "045e02d9-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.39.101.43:34482/auth-token/a", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "046760b5-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.247.105/iran.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "04692f7d-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127733, "uuid": "0487e2c5-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127734, "uuid": "0499cadd-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sonra.eutialyson.com/inst24.msi", "Tag": [ { "name": "MetaStealer", "colour": "#ebffe2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127734, "uuid": "04c20b7f-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Kathan2504/auto-voice-over-tool/raw/refs/heads/main/src/windows/main/auto_tool_over_voice_fining.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127767, "uuid": "18b1874e-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deepnoxa.com/q", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127770, "uuid": "1a795ba0-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/dlr.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wraith-scan", "colour": "#786c14", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127771, "uuid": "1b34d2ed-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.115.147:40622/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127772, "uuid": "1b3a4a0c-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.39.101.43:34482/ssh_config_upd.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127772, "uuid": "1b66ce40-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.80:7231/bins.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127772, "uuid": "1b6fb17a-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.171.142.33/luxzzxzzx/luxzz.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127773, "uuid": "1be28946-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://axodoyin.alwaysdata.net/dl/loader.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127773, "uuid": "1bf6b4eb-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Hundred-praisworthiness384/DomainOS/main/scripts/OS-Domain-1.1.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127773, "uuid": "1c036a81-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://132.243.225.125/Booking/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127773, "uuid": "1c083aee-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/acting-correlationalanalysis567/Twin-Bridge-V1/main/frontend/src/Bridge_Twin_1.1.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127773, "uuid": "1c0a8658-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.249.125.147/mipsel", "Tag": [ { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127774, "uuid": "1cb7f097-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sparoecanthusfultoni104/exphora_db/raw/refs/heads/main/ui/src/components/settings/exphora-db-v3.4-beta.1.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127774, "uuid": "1cfbf886-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/anandhuPeepi/kafkalet/raw/refs/heads/main/frontend/node_modules/tailwindcss/lib/cli/Software-cowardy.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127774, "uuid": "1cfc5608-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Tempterimperforatehymen434/sonos-controller", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127775, "uuid": "1d00fa22-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/pitthawat7/openclaw-win/raw/refs/heads/main/src/win_openclaw_2.7-alpha.2.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127775, "uuid": "1d092194-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Funeralvalue508/CrossDeviceTracker.Desktop/main/unheretical/Cross_Tracker_Desktop_Device_v1.8.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127775, "uuid": "1d680a9d-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/astriefaw/animo-app/blob/master/gradle/wrapper/animo-app_v2.0.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127775, "uuid": "1d6d0de8-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ke029121/energized-time-tracker/raw/refs/heads/main/phlebopexy/energized-time-tracker-1.7.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127776, "uuid": "1d9b7afa-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/AJOBKA/teams-alive/raw/refs/heads/main/childe/teams-alive-1.1.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127776, "uuid": "1da98e95-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.107.74.215/Booking/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127776, "uuid": "1ddcc270-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/holasisisi23/telegram-media-downloader/raw/refs/heads/main/unnoticed/media-telegram-downloader-unhatched.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127776, "uuid": "1e1b251b-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/astriefaw/animo-app/raw/refs/heads/master/gradle/wrapper/animo-app_v2.0.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127776, "uuid": "1e309347-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/FlystudiosTech/haydee-ai-outfit-generator-gui/main/tests/ai_outfit_generator_haydee_gui_1.4.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127777, "uuid": "1e5aa0c3-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Almondleaveswillowlorenzodressing280/opguia/main/opguia/pages/connection/Software-v1.2-alpha.2.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127777, "uuid": "1e66d0dd-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/YousefMohamed54701/PyGenPass/main/intertangle/Gen-Py-Pass-v3.1.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127777, "uuid": "1e78c45e-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/MrFrank-07/iPA-Edit/raw/refs/heads/main/modules/Edit_i_P_v1.7.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127777, "uuid": "1e78d1f8-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://reagentcore.sylo8mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127777, "uuid": "1e8a247d-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Bragii044/SecureKey-Vault/main/context/Secure_Vault_Key_v2.5.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127778, "uuid": "1f3f2062-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/unaccustomed-godspeed86/appbun/main/src/lib/Software-2.5.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127778, "uuid": "1f45053e-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Yashsoni443/ai-image-generator-web/raw/refs/heads/master/functions/ai-image-generator-web_v3.0.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127778, "uuid": "1f4518c3-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Lacquerwarepernyimoth791/Crosshair-X-Custom-Crosshair-Overlay-for-Every-Game/raw/refs/heads/main/1.24.2/for_Game_Custom_Overlay_Every_Crosshair_3.2-alpha.2.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127778, "uuid": "1f59e735-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Yuhejdjdi2828264/EdikteFinder-Analyzer/raw/refs/heads/main/feminality/Analyzer-Edikte-Finder-3.2.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127779, "uuid": "1f7ab8f1-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Yashsoni443/ai-image-generator-web/master/functions/web_generator_image_ai_v2.3.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127779, "uuid": "1f953618-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Memet-Jo/trading/raw/refs/heads/main/sylphlike/trading-3.1.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127780, "uuid": "201a0d34-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/WildCraftsmanFilter/AI-Voice-Changer-Real-Time-Desktop/releases/download/new/AI-Voice-Changer.v5.2.4-x64.rar", "Tag": [ { "name": "pw-6622", "colour": "#e2d8d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127852, "uuid": "4b6811d3-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143:8081/cdn/content/bins.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127852, "uuid": "4b684510-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.239.112.39/bins/loader.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127853, "uuid": "4b848a0e-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.243.109.141:8000/ntpd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127853, "uuid": "4bb696bc-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.94.117/cat.sh", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127857, "uuid": "4e5b1b42-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.39.101.43:34482/auth-token/l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127858, "uuid": "4eaca0b0-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/ohsitsvegawellrip.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "4f18a80d-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.39.101.43:34482/auth-token/k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "4f387c67-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/dlr.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wraith-scan", "colour": "#786c14", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "4f5ce383-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/twelve-today822/JuAI/main/assets/AI_Ju_riverwards.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "4f81319e-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.39.101.43:34482/auth-token/g", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "4f836a6d-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.197/mips", "Tag": [ { "name": "wraith-scan", "colour": "#786c14", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127859, "uuid": "4f89843b-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.39.101.43:34482/auth-token/h", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127860, "uuid": "4fac4cd0-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127860, "uuid": "4fd2d395-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/NightmanVR/ModernNav/raw/refs/heads/main/public/fonts/Modern-Nav-v3.5.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127860, "uuid": "4fd2f833-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Commutertrafficfarsi309/Qclaw-old", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127860, "uuid": "4fd3568b-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127860, "uuid": "4fd359b5-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.77.246.198/z0l1mxjm4mdl4jjfjf7sb2vdmv/KKveTTgaAAsecNNaaaa.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127860, "uuid": "501bce01-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/labieds/Splitwriter/main/src/windows%20-%20old/boards/text-engine/_old/Software-v2.8-beta.5.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127861, "uuid": "506435dd-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ayubalishah/mac-recorder/raw/refs/heads/main/dist/MacRecorder-0.2.0.pkg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127861, "uuid": "509af975-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Mwamwaaaa/opentypeless/main/src/hooks/Software-v1.3.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127861, "uuid": "509fa211-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ayubalishah/mac-recorder/main/MacRecorder/Resources/Assets.xcassets/recorder-mac-2.6.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127861, "uuid": "50c5553b-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/NightmanVR/ModernNav/raw/refs/heads/main/src/hooks/Modern_Nav_1.5.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127862, "uuid": "510e8115-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/NyTrozE/ant-design-wpf/raw/refs/heads/master/src/AntDesign.WPF/wpf-ant-design-v3.7-beta.3.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127862, "uuid": "51223de9-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/mikey143-kun/agentchattr/main/session_templates/Software-3.8.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127863, "uuid": "51d23833-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Lapk0m/n01d-overwatch/main/Shared/overwatch-n-d-2.9.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "524b8c08-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/123affano1/claudetrack/raw/refs/heads/main/client/src/pages/Software_v1.6.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "524fa170-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DouniaJammali31/GrammarFixer/raw/refs/heads/main/images/GrammarFixer-2.5.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "5250ffdb-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/CHAMARA1989/prismos-ai/main/docs/screenshots/prismos_ai_2.6.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "5258931a-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Commutertrafficfarsi309/Qclaw-old/raw/refs/heads/main/Fasciolidae/Qclaw_old_v1.2.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "52638d1e-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/iamsujalarora/githubMeter/raw/refs/heads/main/src/styles/github_Meter_v2.5.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "52743a82-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/arockiakoilpillai/temp-email-api/raw/refs/heads/master/images/temp-email-api-v1.4.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "52785e4f-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Ggshcgdh/LocalTranslateApp/raw/refs/heads/main/kittly/Translate_App_Local_3.5.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "528b250d-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/arockiakoilpillai/temp-email-api/raw/refs/heads/master/images/temp-email-api_v3.7.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "528b25a5-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Jamesnaismit/cv-screener/raw/refs/heads/main/api/postman/screener_cv_v2.8-alpha.2.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "52909823-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DouniaJammali31/GrammarFixer/raw/refs/heads/main/GrammarFixer/Resources/Fixer-Grammar-1.6.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127864, "uuid": "529edd0d-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Reency/Blox-Fruits/raw/refs/heads/main/regardance/Fruits_Blox_v1.0.zip", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127865, "uuid": "52a6e9e5-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/labieds/Splitwriter/raw/refs/heads/main/public/Splitwriter-v2.8.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127865, "uuid": "52a70514-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Jamesnaismit/cv-screener/raw/refs/heads/main/web/hooks/cv-screener-3.4.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127865, "uuid": "52b44980-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sahius1/SocialVideoUtility/main/screenshots/Video-Social-Utility-v2.2.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127867, "uuid": "543a41aa-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.247.105/iran.aarch64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127867, "uuid": "546bf888-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.247.105/iran.arc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127868, "uuid": "54957f30-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.247.105/iran.sh4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777127887, "uuid": "60353be6-40b4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.39.101.43:34482/auth-token/d", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777128194, "uuid": "17188500-40b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://80njj90.sylo8mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777128259, "uuid": "3d8cbb74-40b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.80.169:55944/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777128435, "uuid": "a6ea718d-40b5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://theorypin.sylo8mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777128792, "uuid": "7bc43645-40b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ba5ic0-spark.sylo8mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777128803, "uuid": "81d5e921-40b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.63.19.19/vca1", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777128803, "uuid": "81f574fd-40b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.63.19.19/vc1", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777128803, "uuid": "81fc77b5-40b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.63.19.19/karm", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777128804, "uuid": "82be1730-40b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.63.19.19/vca", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777128807, "uuid": "843b272e-40b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.63.19.19/kamd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777128809, "uuid": "85c8ceee-40b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.63.19.19/vc", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777128913, "uuid": "c37fe9a8-40b6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.129.6:52702/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129092, "uuid": "2e7845ca-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vitalpur.sylo8mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129146, "uuid": "4e97daf8-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129147, "uuid": "4f041909-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129147, "uuid": "4f264fd7-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129147, "uuid": "4f31a576-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.mipsel", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129147, "uuid": "4f364a3f-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129161, "uuid": "572a6360-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.arc_gnu_2017.09_prebuilt_uclibc_le_arc700_linux_install", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129164, "uuid": "59603998-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129166, "uuid": "5a7c01aa-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129166, "uuid": "5a8b44a0-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.147.59:56819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129166, "uuid": "5a9be70a-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129166, "uuid": "5aa97a53-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.i486", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129167, "uuid": "5ab7a1cb-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.powerpc", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129167, "uuid": "5b00e1f7-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129168, "uuid": "5baf404c-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/dropper.sh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129170, "uuid": "5cd852ca-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129170, "uuid": "5d05ff89-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129170, "uuid": "5d10fca4-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.powerpc-440fp", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129171, "uuid": "5d1d6ad2-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.arm64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129171, "uuid": "5d1e5cb0-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129171, "uuid": "5d632cd5-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129171, "uuid": "5d6ad2c2-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/bot.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129214, "uuid": "7739d6b6-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://enotpidarmot.pw/setup_signed.exe", "Tag": [ { "name": "ArechClient", "colour": "#554b24", "exportable": true, "hide_tag": false }, { "name": "Arechclient2", "colour": "#1b320a", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "SectopRAT", "colour": "#c75269", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129276, "uuid": "9be59283-40b7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://129.213.9.74:1338/mermiler.tar.gz", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129446, "uuid": "01284cf5-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jade.arc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129446, "uuid": "012b5aae-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143:8081/debug", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129446, "uuid": "012c07c1-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jade.mips64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129446, "uuid": "013e0f4a-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jade.i686", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129446, "uuid": "017a41f0-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jade.sparc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129451, "uuid": "043a7317-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.80:5001/arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129451, "uuid": "04406825-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.80:5001/arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129452, "uuid": "04b3c74c-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.80:5001/mipsle", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129452, "uuid": "04b40da1-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.80:5001/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129452, "uuid": "04b9a8e8-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.80:5001/arm64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129452, "uuid": "04be57c2-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.80:5001/x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129453, "uuid": "0544b17b-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.80:5001/arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129456, "uuid": "06fb2ecc-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.80:5001/amd64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129458, "uuid": "08a26c1b-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.80:5001/bot.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129461, "uuid": "0a471f11-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.131.108.107/0x83911d24Fx.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129518, "uuid": "2c37ab81-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wfamakg.to2varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777129640, "uuid": "74ab480f-40b8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.249.125.147/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777130175, "uuid": "b3941139-40b9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ernbe-leaf.to2varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777130414, "uuid": "42046724-40ba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://n0rt-crest.to2varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777130773, "uuid": "181a36eb-40bb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://glos-rep.to2varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777131190, "uuid": "10cdcf71-40bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dustfix.to2varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777131229, "uuid": "2805b41a-40bc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qhsd8888.com/down.php/bae7aa2acb876b53690a9e627f8ffdef.zip", "Tag": [ { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777131616, "uuid": "0ea8ca1e-40bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.81.12:53154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777131668, "uuid": "2d858ac7-40bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://x1ov.to2varon.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777131909, "uuid": "bda0561c-40bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.197/run.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777131973, "uuid": "e3366514-40bd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3fgrll.nov7liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132026, "uuid": "0329aeae-40be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.227.180:51572/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132347, "uuid": "c285eb08-40be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.197/armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132347, "uuid": "c286b487-40be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.197/armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132347, "uuid": "c2950c28-40be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.197/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132347, "uuid": "c2b0f91e-40be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.197/ppc64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132348, "uuid": "c2bc301b-40be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.197/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132348, "uuid": "c2deae7c-40be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.197/armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132391, "uuid": "dc59dd3b-40be-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rx64iv.nov7liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132627, "uuid": "694196db-40bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.67.85:59331/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132692, "uuid": "9016435e-40bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hf89cj2.nov7liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132869, "uuid": "f9a50b75-40bf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.124.59.142/cl-ncl-following", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ZigClipper", "colour": "#72f06d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132933, "uuid": "1fc22315-40c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dcdivas.com/wp-includes/Text/Diff/Engine/Decred.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ZigClipper", "colour": "#72f06d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777132995, "uuid": "447cc3a5-40c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zencorear1.nov7liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777133021, "uuid": "543962f2-40c0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.209.163.189:57219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777133354, "uuid": "1ac1d129-40c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pl4sm-flow.nov7liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777133535, "uuid": "866eece5-40c1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.195.14:35186/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777133769, "uuid": "11d4a06b-40c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bundle-sheet.nov7liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777133948, "uuid": "7cf2a25c-40c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.italiaregina.it/wp-content/plugins/oAjtOHvn.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777134127, "uuid": "e795d222-40c2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.67.85:59331/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777134437, "uuid": "a017e7e2-40c3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.23.140:41366/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777135338, "uuid": "b92fcb5a-40c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.116.146:37115/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777135390, "uuid": "d8377938-40c5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.23.140:41366/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777136483, "uuid": "63efacd0-40c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.233.8:41837/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777136544, "uuid": "87f1b622-40c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.116.146:37115/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777136724, "uuid": "f3359a19-40c8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.195.14:35186/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777136826, "uuid": "306221f4-40c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.220.29.136:52021/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777136960, "uuid": "7fb78603-40c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.217.184.93:40071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777137075, "uuid": "c4844a7b-40c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.44.177:45411/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777137077, "uuid": "c59081c4-40c9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://noir-1.miv6soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777137260, "uuid": "32b15650-40ca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.217.184.93:40071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777137976, "uuid": "dd83c574-40cb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-5.miv6soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777138043, "uuid": "0541c07a-40cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.239.218:39838/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777138217, "uuid": "6cec1378-40cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://holz-baum-3.miv6soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777138328, "uuid": "afa4c27f-40cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.220.29.136:52021/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777138403, "uuid": "dbe7ce4a-40cc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.17.73:33077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777138644, "uuid": "6bcaec1a-40cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.93.178:49970/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777138763, "uuid": "b27b95a5-40cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.38.79.137:47753/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777138829, "uuid": "d9c44e66-40cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.237.17.123:49053/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777138830, "uuid": "daa34c50-40cd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.119.47:48951/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777138929, "uuid": "158bc328-40ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-9.miv6soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777138999, "uuid": "3f3fc053-40ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.237.17.123:49053/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777139112, "uuid": "82ef8b10-40ce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-star-2v.dex2lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777139596, "uuid": "a3343e5b-40cf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rouge-7.dex2lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777139905, "uuid": "5b3e12e9-40d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.17.73:33077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777140081, "uuid": "c40ef251-40d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kalt-berg-1m.dex2lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777140128, "uuid": "e0429d11-40d0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.89.3:51530/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777140432, "uuid": "958f7a69-40d1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-4.dex2lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777140673, "uuid": "25269fa8-40d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://petit-mond-6.dex2lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777140848, "uuid": "8db26452-40d2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.119.47:48951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777141042, "uuid": "010ccf58-40d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.9.195:44806/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777141162, "uuid": "48c2ed1e-40d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.158.9:40513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777141330, "uuid": "ac99e680-40d3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iron-8.dex2lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777141693, "uuid": "855a6d55-40d4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-fire-9w.bexla8rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777141763, "uuid": "aed8ff5c-40d4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.106.205:47020/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777142002, "uuid": "3d61624b-40d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.9.195:44806/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777142228, "uuid": "c4005fe7-40d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.125.227:50287/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777142289, "uuid": "e81a5e9f-40d5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://haus-3.bexla8rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777142481, "uuid": "5a7f8ee4-40d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.226.192:57831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777142546, "uuid": "8135cb4c-40d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.10.205:49369/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777142593, "uuid": "9dabde0f-40d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zeit-land-5.bexla8rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777142594, "uuid": "9e1ee17b-40d6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.226.192:57831/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777142957, "uuid": "76733503-40d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bleu-2k.bexla8rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777143078, "uuid": "be678f2f-40d7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/sysupdate.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777143246, "uuid": "2303bb5a-40d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wald-baum-7.bexla8rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777143255, "uuid": "27d456a5-40d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.35.148:57852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777143611, "uuid": "fc4defd3-40d8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-1.bexla8rin.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777143973, "uuid": "d44c0896-40d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-star-4s.qiv5moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777144027, "uuid": "f48707fb-40d9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.246.10.205:49369/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777144160, "uuid": "438d9544-40da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.10.66:58514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777144268, "uuid": "841ffe1e-40da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-9.qiv5moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777144391, "uuid": "cd75089d-40da-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.84.219:47157/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777144931, "uuid": "0f5d3489-40dc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.35.148:57852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777145108, "uuid": "7878ceee-40dc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://holz-berg-2.qiv5moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777145228, "uuid": "c0219a15-40dc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.239.179:47135/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777145358, "uuid": "0dd815d8-40dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.254.225:45761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777145359, "uuid": "0e0ca8ed-40dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.70.211:44943/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777145527, "uuid": "727c6127-40dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.31.127:54612/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777145651, "uuid": "bc195444-40dd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-5x.qiv5moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777145768, "uuid": "021bd613-40de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://petit-zeit-8.qiv5moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146187, "uuid": "fbcd57f9-40de-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-3.qiv5moren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146429, "uuid": "8c0b42c3-40df-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iron-land-1q.zex1liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146739, "uuid": "44e82a42-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146740, "uuid": "45125e6c-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "67f66fab-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnsh4xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "67fbec58-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnor1kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "68019126-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/run.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "68036528-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "6807f81b-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "68080629-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxni386xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "6809dfc9-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnsh2xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "6809e493-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnmipsxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "680acaab-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146798, "uuid": "6814d522-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnm68kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146849, "uuid": "86073485-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rouge-6.zex1liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146858, "uuid": "8b8f25cd-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146858, "uuid": "8b8f32a5-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.177/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777146982, "uuid": "d5904363-40e0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.84.219:47157/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777147154, "uuid": "3c3a7a7a-40e1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-wald-4.zex1liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777147513, "uuid": "123dd1f4-40e2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kalt-7.zex1liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777148114, "uuid": "7861e0c5-40e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-berg-2c.zex1liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777148294, "uuid": "e3520676-40e3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://haus-5.zex1liron.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777148476, "uuid": "501c3d43-40e4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-mond-9k.rax7pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777148777, "uuid": "033de84c-40e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.101.153/n2/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777148777, "uuid": "034145e8-40e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.101.153/n2/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777148827, "uuid": "216a47b8-40e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zeit-2.rax7pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777148839, "uuid": "2855e3f4-40e5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.248.101.153/n2/lterouter", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777149488, "uuid": "ab4d8170-40e6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-fire-5.rax7pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777149667, "uuid": "1605702a-40e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-1.rax7pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777149862, "uuid": "8a4305c7-40e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.67.213.82:58805/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777149912, "uuid": "a7c71bf2-40e7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.0.93:53945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777150152, "uuid": "37019b28-40e8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-land-3m.rax7pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777150687, "uuid": "75ed3122-40e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-8.rax7pavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777150871, "uuid": "e355d811-40e9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://petit-star-6z.sylo3mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777151167, "uuid": "9400ef37-40ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.28.179.42:58387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777151174, "uuid": "97ee3714-40ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-4.sylo3mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777151189, "uuid": "a1607a00-40ea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.212.118:39727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777151470, "uuid": "48a9a908-40eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://holz-berg-9.sylo3mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777151718, "uuid": "dc259451-40eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.227.180:51572/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777151718, "uuid": "dcb47bbc-40eb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.46.37:49756/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777152194, "uuid": "f8188e48-40ec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bleu-2.sylo3mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777152427, "uuid": "82e05f68-40ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.173.162:58261/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777152432, "uuid": "85fab188-40ed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-wald-5v.sylo3mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777152801, "uuid": "61ce01da-40ee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.224.218:55579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153092, "uuid": "0fa6659e-40ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaanewmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153092, "uuid": "0faa875a-40ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaanewx8664", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153092, "uuid": "0fae65bf-40ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaanewmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153093, "uuid": "0fb7261a-40ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaanewarm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153093, "uuid": "0fb72618-40ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaanewarm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153099, "uuid": "13ab947a-40ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaanewarm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153105, "uuid": "1750eac1-40ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaanewx86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153159, "uuid": "376025ad-40ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.165.225/alyssaanewarm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153335, "uuid": "a010c3af-40ef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://haus-1.sylo3mer.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153512, "uuid": "09f9a7f6-40f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.46.37:49756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153650, "uuid": "5bcd25d6-40f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.89.44:56735/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777153749, "uuid": "9740d1aa-40f0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rouge-3.nov2liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777154227, "uuid": "b3b4a455-40f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.95.184:42374/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777154297, "uuid": "dddc6405-40f1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.220.194:60093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777154414, "uuid": "23379513-40f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-land-1.nov2liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777154598, "uuid": "9132833d-40f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.224.218:55579/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777154662, "uuid": "b72adce3-40f2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.133.48:42749/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777155011, "uuid": "875bcbfc-40f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kalt-5.nov2liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777155084, "uuid": "b2c3ade5-40f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.65.236:35628/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777155131, "uuid": "ceca0569-40f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.89.44:56735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777155187, "uuid": "f00e45f1-40f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zeit-berg-4n.nov2liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777155188, "uuid": "f0cbf458-40f3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.45.240:60011/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777155610, "uuid": "ec33b996-40f4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-9.nov2liren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777155851, "uuid": "7be4cc39-40f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-star-2x.miv8soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777155914, "uuid": "a18c14c7-40f5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.181.158.75:39949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777156267, "uuid": "73ca9c95-40f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-6.miv8soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777156461, "uuid": "e73ddd50-40f6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.86.93:41234/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777156627, "uuid": "4a400d3e-40f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-mond-8.miv8soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777156688, "uuid": "6ef742b9-40f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.93.178:49970/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777156868, "uuid": "da1323c9-40f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.103.96:33562/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777156928, "uuid": "fdfe07a6-40f7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-1.miv8soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777157059, "uuid": "4be664bd-40f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.25.235:52554/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777157060, "uuid": "4c95f323-40f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.204.144:32991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777157229, "uuid": "b185f6dd-40f8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://holz-baum-5k.miv8soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777157592, "uuid": "897c5ab5-40f9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://haus-3.miv8soren.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777157842, "uuid": "1eda7fde-40fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.181.158.75:39949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777157952, "uuid": "603e9fef-40fa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-land-7b.dex1lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777158554, "uuid": "c6c37822-40fb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bleu-4.dex1lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777158745, "uuid": "38d54532-40fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.204.144:32991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777158787, "uuid": "51a60d3b-40fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://petit-fire-1.dex1lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777159043, "uuid": "eab89829-40fc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.95.54.96:53383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777159454, "uuid": "df8ee1df-40fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rouge-9.dex1lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777159462, "uuid": "e3f6641b-40fd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.106.205:47020/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777159809, "uuid": "b3541ede-40fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-berg-6p.dex1lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777159831, "uuid": "bff86217-40fe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.206.197.73:55589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777160053, "uuid": "4449771c-40ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-2.dex1lavel.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777160180, "uuid": "8fefbf84-40ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.144.170:42311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777160295, "uuid": "d481031a-40ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.237.48.240:53906/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777160366, "uuid": "fece4f19-40ff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.144.170:42311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777160469, "uuid": "3c458e87-4100-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://comp-os4d.mivonex-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777160604, "uuid": "8cb53221-4100-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.83.30:45417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777160662, "uuid": "af7f5645-4100-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.95.54.96:53383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777160725, "uuid": "d4d59891-4100-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.83.30:45417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777160771, "uuid": "f0289d11-4100-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://onli6sp.mivonex-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777161068, "uuid": "a1872192-4101-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://haus-mp.mivonex-serv.in.net/cdk-msdn-3457325-null/load-file0dsdf567.chk", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777161382, "uuid": "5cbfb0f0-4102-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.248.178:52559/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1777161497, "uuid": "a13400d8-4102-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/streffy/999/-/raw/main/S8D70IPCZNAA.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777159807, "uuid": "b197ac25-40fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.206.197.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127718, "uuid": "fb9eab74-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.77.246.198", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777152785, "uuid": "58b10276-40ee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.224.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777145225, "uuid": "be566eba-40dc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.239.179", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777108507, "uuid": "4082b70f-4087-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.187.33.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127464, "uuid": "63f40067-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.175.114.96", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777107725, "uuid": "6e60c33b-4085-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.138.0.30", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075265, "uuid": "dae25b22-4039-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.70.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777138807, "uuid": "cc9ad12f-40cd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.237.17.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777142525, "uuid": "753c48a0-40d6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.246.10.205", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777108385, "uuid": "f7fa6c1c-4086-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.127.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116365, "uuid": "8c8f0ebf-4099-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.191.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777144145, "uuid": "3a694fe5-40da-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.10.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777115765, "uuid": "26a4ecb3-4098-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.94.31.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777107425, "uuid": "bb869428-4084-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.227.183.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777086125, "uuid": "23dfb56c-4053-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.160.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121286, "uuid": "018aa49d-40a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.242.181", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777105325, "uuid": "d82b15dd-407f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.4.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097766, "uuid": "3e6ffed2-406e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.65.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116545, "uuid": "f78a9b0e-4099-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.1.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121106, "uuid": "9676d666-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.81.160", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777100526, "uuid": "ab7ead0a-4074-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.20.70", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777100226, "uuid": "f89fcfcb-4073-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.254.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116425, "uuid": "b002e8ca-4099-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.11.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777080065, "uuid": "081eedd3-4045-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.175.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777142464, "uuid": "50b2f962-40d6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.226.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777125426, "uuid": "a4fa1be9-40ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.233.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121044, "uuid": "71432663-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.234.103", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777096865, "uuid": "258f0c7c-406c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.251.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121106, "uuid": "96773620-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.213.254", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121044, "uuid": "7141d8f8-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.90.25", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777093865, "uuid": "296eee35-4065-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.59.93.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777111926, "uuid": "365f81e5-408f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.18.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132986, "uuid": "3f015051-40c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.209.163.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121106, "uuid": "9675cb13-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.10.39.242", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777134424, "uuid": "98af5907-40c3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.23.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121225, "uuid": "dd4705e7-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.255.229", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121106, "uuid": "967ab6bb-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.237.178", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777122065, "uuid": "d20d8c7d-40a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.84.214.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777106406, "uuid": "5c6c31e3-4082-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.21.104.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121225, "uuid": "dd46fc22-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.23.132.93", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121225, "uuid": "dd4f8352-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.140.90", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777084684, "uuid": "c92ea0df-404f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.158.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121166, "uuid": "b9d17309-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.25.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120207, "uuid": "7e2467c5-40a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.1.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777155066, "uuid": "a811296c-40f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.65.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777101306, "uuid": "7caf95b3-4076-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.68.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777105325, "uuid": "d82b094b-407f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.134.57.165", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119065, "uuid": "d5b722ef-409f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.213.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116606, "uuid": "1bff02c6-409a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.219.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121106, "uuid": "96760991-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.173.89.126", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777110725, "uuid": "6a922083-408c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.234.181", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777106945, "uuid": "9d9e58bb-4083-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.115.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777078625, "uuid": "adc7b278-4041-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.155.75", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124526, "uuid": "8c8bd134-40ac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.227.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121225, "uuid": "dd4df2df-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.6.165.86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777160585, "uuid": "81b95b0a-4100-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.83.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777141744, "uuid": "a37e8a8b-40d4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.106.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777102806, "uuid": "fa7bc01a-4079-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.171.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118525, "uuid": "939c0503-409e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.82.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777103707, "uuid": "13b3416c-407c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.25.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777080725, "uuid": "910e0e45-4046-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.236.30", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777077125, "uuid": "2f701dfe-403e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.243.46", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777140125, "uuid": "de8816a6-40d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.89.3", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127765, "uuid": "177cea22-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "132.243.225.125", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777160284, "uuid": "ce174360-40ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "140.237.48.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127852, "uuid": "4b3cf85d-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "150.241.94.117", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127852, "uuid": "4b204494-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.243.109.141", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777102624, "uuid": "8e6b78da-4079-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "160.30.103.84", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777148764, "uuid": "fb877834-40e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "162.248.101.153", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127719, "uuid": "fb9ec899-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "162.249.125.147", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127645, "uuid": "cf925e08-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "165.22.247.105", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "wraith", "colour": "#0acb31", "exportable": true, "hide_tag": false }, { "name": "x86_64", "colour": "#8e3094", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121166, "uuid": "b9d75152-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.17.20", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121166, "uuid": "b9d47010-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.153.230", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121044, "uuid": "71425bcf-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.70.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777145525, "uuid": "71081a2e-40dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.31.127", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777082106, "uuid": "c8ba2d37-4049-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.96.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777128245, "uuid": "35791a99-40b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.80.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777107245, "uuid": "504fa343-4084-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.43.154.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146725, "uuid": "3c2cf01e-40e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.177", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121044, "uuid": "71421bf4-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.75.200.17", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121166, "uuid": "b9d8271e-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.150.124.67", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121106, "uuid": "96755fee-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.243.64.135", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121286, "uuid": "018f0f28-40a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.245.43.153", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777100285, "uuid": "1be2f1a2-4074-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.245.43.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777149907, "uuid": "a5330cda-40e7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.0.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120445, "uuid": "0c4be3a8-40a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.217.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777089306, "uuid": "8c1df176-405a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.221.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118106, "uuid": "99e228eb-409d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.4.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777093626, "uuid": "9aa736a4-4064-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.9.183", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777160165, "uuid": "8737d826-40ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.144.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121225, "uuid": "dd4f1c81-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.24.129", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777084444, "uuid": "3a4c669a-404f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.49.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119848, "uuid": "a83d9214-40a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.185.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777115046, "uuid": "7a2ac93e-4096-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.110.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120145, "uuid": "59615e4e-40a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.119.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777156445, "uuid": "dddd9f6b-40f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.86.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777141025, "uuid": "f6b681d5-40d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.9.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777125965, "uuid": "e68a4c77-40af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.183.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777161364, "uuid": "51ba7f16-4102-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.248.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777082826, "uuid": "7566f1f5-404b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.173.162", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777157045, "uuid": "43c700d4-40f8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.204.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777154225, "uuid": "b28aceca-40f1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.95.184", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777095426, "uuid": "cba97de2-4068-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.115.109", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777105325, "uuid": "d82b3c24-407f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.128.162", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777090925, "uuid": "50e78bb0-405e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.153.219", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121044, "uuid": "7141ea02-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.45.75.54", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127765, "uuid": "177a499d-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.107.74.215", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121286, "uuid": "0192d07b-40a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.30.145.245", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127645, "uuid": "cf922a2d-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.109.200.197", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "wraith-scan", "colour": "#786c14", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121044, "uuid": "71433a25-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.187.101.209", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777086306, "uuid": "8f8fee9e-4053-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.107.92.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121225, "uuid": "dd4f0d8c-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.16.164.144", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777108925, "uuid": "39c7a1b8-4088-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.193.168", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777107844, "uuid": "b5a0c40e-4085-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.202.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121225, "uuid": "dd50046e-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.103.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777154646, "uuid": "ad7b9eef-40f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.133.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777111926, "uuid": "365f7868-408f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.65.40", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121166, "uuid": "b9d05b16-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.12.80", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097407, "uuid": "68706038-406d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.6.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777089785, "uuid": "a9872d8b-405b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.8.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121106, "uuid": "9675738b-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.200.221.163", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777110306, "uuid": "70ba80e8-408b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.35.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121824, "uuid": "4211c272-40a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.79.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120145, "uuid": "5961511e-40a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.184.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075325, "uuid": "fe6aface-4039-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.188.178", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777151707, "uuid": "d620fd31-40eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.46.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777100470, "uuid": "8a4f3362-4074-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "25eap9f.sylo6mer.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777076406, "uuid": "82c41748-403c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.14.191.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777076765, "uuid": "59016c65-403d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.212.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777101606, "uuid": "2f9fc38f-4077-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.189.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777125306, "uuid": "5df4939e-40ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.213.140.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120025, "uuid": "1210e204-40a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.177.203", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777133526, "uuid": "81053d0b-40c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.195.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777136945, "uuid": "7731227f-40c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.217.184.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121286, "uuid": "0190d255-40a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.222.45.245", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118764, "uuid": "227a8d3f-409f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.222.70.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121166, "uuid": "b9d16a7f-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.24.104.224", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127765, "uuid": "1783ead0-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.115.147", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777103825, "uuid": "59c7d2ae-407c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.115.249", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121106, "uuid": "967618ab-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.69.93.84", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777113907, "uuid": "d335d10f-4093-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.111.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777123625, "uuid": "73981aec-40aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.26.85.56", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121286, "uuid": "018d34c4-40a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.110.57", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121286, "uuid": "018aa427-40a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.251.7", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777131968, "uuid": "e08b4af8-40bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3fgrll.nov7liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121346, "uuid": "252a3895-40a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3nzy-layer.qiv9moren.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777142226, "uuid": "c295355f-40d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.176.125.227", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777102025, "uuid": "28fa10e1-4078-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.172.154", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777089845, "uuid": "cd4a9726-405b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.73.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777093626, "uuid": "9aa70bb2-4064-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.242.7", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777105085, "uuid": "494ae433-407f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.35.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777143244, "uuid": "21c4281c-40d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.35.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777086125, "uuid": "23df8f3c-4053-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.41.142", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777138385, "uuid": "d19bba10-40cc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.17.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777092666, "uuid": "5ea940b2-4062-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.55.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098125, "uuid": "148b6adc-406f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.92.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777125426, "uuid": "a4fa384c-40ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.143.46", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777138625, "uuid": "6036b2c7-40cd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.93.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777076945, "uuid": "c442fc60-403d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.228.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118465, "uuid": "6fd035eb-409e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.5.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777105024, "uuid": "24da2bc9-407f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.147.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121044, "uuid": "71426a3c-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.202.67", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121106, "uuid": "9675d3c6-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.200.254", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777089606, "uuid": "3ee8c3c6-405b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.25.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777084566, "uuid": "8273fd5d-404f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.54.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777114925, "uuid": "322799ab-4096-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.247.51", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777105085, "uuid": "494ae46e-407f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.80.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777106525, "uuid": "a346722b-4082-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.187.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777122305, "uuid": "61035ea7-40a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "4wjh4hoo.qiv9moren.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777108925, "uuid": "39c78ee3-4088-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.166.28.113", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777109406, "uuid": "58b87e24-4089-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.63.19.19", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120984, "uuid": "4dd1176c-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "54.39.101.43", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153625, "uuid": "4d5b883c-40f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.42.89.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121166, "uuid": "b9d3666e-40a4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.60.85.181", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777138025, "uuid": "fb11c901-40cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.239.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075445, "uuid": "4642bf54-403a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.131.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777113124, "uuid": "00ded088-4092-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.34.102", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777106165, "uuid": "cc82233f-4081-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.46.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117264, "uuid": "a442950d-409b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.123.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127765, "uuid": "177a11b3-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "62.171.142.33", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120744, "uuid": "bec3db84-40a3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "6z3dyra.qiv9moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777094531, "uuid": "b672658a-4066-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "72z5.zex8liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777091527, "uuid": "b7e668e0-405f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "7fsk.bexla9rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777128190, "uuid": "14c4bdad-40b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "80njj90.sylo8mer.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127765, "uuid": "1780158a-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.26.74.80", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777109046, "uuid": "821f6910-4088-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "84gxvrtf.miv7sorel.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1777115585, "uuid": "bb9922e1-4097-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "90.174.101.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777101124, "uuid": "105b21cd-4076-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "amber-mon.sylo6mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777100165, "uuid": "d4a5850f-4073-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "argrs.sylo6mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777103707, "uuid": "13c77fc6-407c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ash-leaf.to9varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777106225, "uuid": "f07fa029-4081-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "atom1-span.nov3liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777102445, "uuid": "234e89d3-4079-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "atomicextract.to9varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777093990, "uuid": "7428bc1c-4065-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "audittiny.qiv2moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777128790, "uuid": "7a9420bc-40b6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ba5ic0-spark.sylo8mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777085944, "uuid": "b84e3928-4052-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bark-line.miv7sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777085527, "uuid": "bfb2d117-4051-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "basicret.miv7sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777152186, "uuid": "f31b3138-40ec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bleu-2.sylo3mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777142950, "uuid": "7213a76a-40d7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bleu-2k.bexla8rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777077546, "uuid": "2a3e34e1-403f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bleu-4.cicada-tkacki.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777158550, "uuid": "c4bdcb11-40fb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bleu-4.dex1lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777081265, "uuid": "d33ce104-4047-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-fire-8x.excavat-toponym.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777141689, "uuid": "82d84f0c-40d4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-fire-9w.bexla8rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777148469, "uuid": "4c184273-40e4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-mond-9k.rax7pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777120385, "uuid": "e88aad8e-40a2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "boostmanifest.qiv9moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777133765, "uuid": "0f74f8fb-40c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bundle-sheet.nov7liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118827, "uuid": "47f1df16-409f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bundleform.bexla2rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777103045, "uuid": "88f40221-407a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bytefore.to9varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777111506, "uuid": "3c53ffd4-408e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bytehard.sylo6mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777126271, "uuid": "9cade2e1-40b0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "campa-fla.rax5pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777091284, "uuid": "26f77bc9-405f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "canopystor.bexla9rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127650, "uuid": "d2f4ce43-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cl.distritovagas.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777108264, "uuid": "afff2af5-4086-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clust1-dock.nov3liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118525, "uuid": "93e1388a-409e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "colocip.bexla2rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777160466, "uuid": "3a7905c3-4100-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "comp-os4d.mivonex-serv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777109345, "uuid": "33ecde53-4089-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "conv3r5-glow.dex3lavan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777092966, "uuid": "11ca552f-4063-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cultureengine.qiv2moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777082225, "uuid": "0f848b11-404a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-6.excavat-toponym.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777148109, "uuid": "75373669-40e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-berg-2c.zex1liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777157950, "uuid": "5f15f9eb-40fa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-land-7b.dex1lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777139109, "uuid": "811cc436-40ce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-star-2v.dex2lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777152425, "uuid": "8205bcb2-40ed-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-wald-5v.sylo3mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127464, "uuid": "6409d008-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dealparc.sylo8mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127766, "uuid": "17a75af8-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deepnoxa.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777115650, "uuid": "e263be44-4097-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "del1v-graph.dex7lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777084385, "uuid": "16e278a6-404f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dffer.excavat-toponym.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777110545, "uuid": "ff3dec96-408b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dpcr.qiv2moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777083967, "uuid": "1df2c5d7-404e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dsf2.excavat-toponym.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777131186, "uuid": "0e434f62-40bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dustfix.to2varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777096929, "uuid": "4bd7ff19-406c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyn-tideis.zex8liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119786, "uuid": "836fa65f-40a1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "eamo.bexla2rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777090565, "uuid": "7a9b6245-405d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "echoloa.bexla9rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777105863, "uuid": "18c0b89c-4081-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "emidb.kymle1rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129209, "uuid": "74345ead-40b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "enotpidarmot.pw" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777130169, "uuid": "b02ef6cf-40b9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ernbe-leaf.to2varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777118290, "uuid": "07f88053-409e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "f0cu-grid.bexla2rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124465, "uuid": "688c52b4-40ac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "f4ct0ry-mark.zex3liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777099206, "uuid": "990db3c5-4071-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "falforma.rax4pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777143608, "uuid": "fa7560e9-40d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-1.bexla8rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777149485, "uuid": "a93e2694-40e6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-fire-5.rax7pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777082769, "uuid": "53a1332e-404b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-land-9c.excavat-toponym.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777155849, "uuid": "7a87f9fc-40f5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-star-2x.miv8soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777076531, "uuid": "cd7299a8-403c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-zeit-5k.cicada-tkacki.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777111866, "uuid": "127f306a-408f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "firmwa7-point.to9varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777113065, "uuid": "dd54dc1f-4091-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fjtx.miv4soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777119185, "uuid": "1d677977-40a0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fl4rn2-phase.bexla2rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777110364, "uuid": "93c9e39d-408b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "focusflame.bexla9rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777125607, "uuid": "1128c17d-40af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "formtrai.rax5pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098366, "uuid": "a4589d12-406f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "forrn7-panel.rax4pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777100885, "uuid": "81afdee1-4075-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gentl-snow.sylo6mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777105566, "uuid": "676d9565-4080-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-1c3.kymle1rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777092425, "uuid": "cf055d4b-4061-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gf2rfd.qiv2moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777130766, "uuid": "14385391-40bb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "glos-rep.to2varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777083667, "uuid": "6b0f1ce4-404d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-2.excavat-toponym.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777150146, "uuid": "337c522e-40e8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-land-3m.rax7pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777156624, "uuid": "48e33b87-40f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-mond-8.miv8soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777077907, "uuid": "0168ac1a-4040-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-mond-9z.cicada-tkacki.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777143970, "uuid": "d26a8a20-40d9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-star-4s.qiv5moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777114207, "uuid": "863675e1-4094-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gpfour4.miv4soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777086784, "uuid": "acec6b51-4054-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "growthcircui.miv7sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777078324, "uuid": "fa68f899-4040-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "haus-1.cicada-tkacki.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153327, "uuid": "9b5b9ef9-40ef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "haus-1.sylo3mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777142286, "uuid": "e6c89c20-40d5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "haus-3.bexla8rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777157589, "uuid": "87c4cafa-40f9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "haus-3.miv8soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777148285, "uuid": "de7f27ce-40e3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "haus-5.zex1liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777161066, "uuid": "a04736a5-4101-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "haus-mp.mivonex-serv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777101785, "uuid": "99c75ddc-4077-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hdf358xa.sylo6mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132630, "uuid": "6b4285f8-40bf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hf89cj2.nov7liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777138213, "uuid": "6a8a83cc-40cc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "holz-baum-3.miv6soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777081868, "uuid": "3a962207-4049-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "holz-baum-4.excavat-toponym.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777157225, "uuid": "af101e85-40f8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "holz-baum-5k.miv8soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777145106, "uuid": "77380e55-40dc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "holz-berg-2.qiv5moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777075806, "uuid": "1d8af460-403b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "holz-berg-4b.slanikt7ay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777151466, "uuid": "46395407-40eb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "holz-berg-9.sylo3mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777113665, "uuid": "434fb79d-4093-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-inv0ice.miv4soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777104009, "uuid": "c79c5ab1-407c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "inkraven.kymle1rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777141326, "uuid": "aa0fd956-40d3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iron-8.dex2lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146425, "uuid": "898910f1-40df-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iron-land-1q.zex1liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777078686, "uuid": "d1bad811-4041-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iron-star-2n.caissonnarc0m.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777098011, "uuid": "d05b6b3e-406e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jkdraj.rax4pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777088465, "uuid": "96962b69-4058-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jz8ef5.dex3lavan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777155008, "uuid": "85aa76f1-40f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kalt-5.nov2liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777147507, "uuid": "0ebfcf39-40e2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kalt-7.zex1liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777140075, "uuid": "c0dff707-40d0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kalt-berg-1m.dex2lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777077245, "uuid": "76f77ada-403e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kalt-wald-8.cicada-tkacki.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116847, "uuid": "abb06f1f-409a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kel-marken.dex7lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116490, "uuid": "d70ba89f-4099-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelcoreos9.dex7lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777095370, "uuid": "aaad804c-4068-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kkdho.zex8liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127231, "uuid": "d8d2a1e0-40b2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "l1ch-mesh.rax5pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127650, "uuid": "d2eb1af9-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ledger.eu.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777125307, "uuid": "5dfc0780-40ae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "m17e.rax5pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777116252, "uuid": "48ef656a-4099-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mer-meshis.dex7lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777110785, "uuid": "8e631855-408c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mossphoto.zex8liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777093151, "uuid": "7f8ce3e0-4063-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "motif4-vector.qiv2moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777130406, "uuid": "3daceec2-40ba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "n0rt-crest.to2varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777103345, "uuid": "3bdc1867-407b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-cornput.to9varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777137071, "uuid": "c22dfead-40c9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-1.miv6soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777149665, "uuid": "14aec1d9-40e7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-1.rax7pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777145647, "uuid": "b9af7dfd-40dd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-5x.qiv5moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777156265, "uuid": "7264b902-40f6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-6.miv8soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777080365, "uuid": "bb0206c3-4045-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-7.caissonnarc0m.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777088285, "uuid": "2b59ca5c-4058-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "norspireos3.dex3lavan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777093450, "uuid": "31ce954a-4064-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ollowgl.qiv2moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777160769, "uuid": "ef02753f-4100-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "onli6sp.mivonex-serv.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777160050, "uuid": "4297a846-40ff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-2.dex1lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777080907, "uuid": "fd90c9d0-4046-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-3.caissonnarc0m.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146185, "uuid": "faa451a1-40de-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-3.qiv5moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777150685, "uuid": "74cfd5d7-40e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-8.rax7pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777138925, "uuid": "12f4aa13-40ce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-9.miv6soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777155607, "uuid": "ea6e72ef-40f4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-9.nov2liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777076047, "uuid": "acc52579-403b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-9.slanikt7ay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777092125, "uuid": "1c7c3cf9-4061-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "passiv-reage.qiv2moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777080545, "uuid": "26391994-4046-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "petit-berg-5p.caissonnarc0m.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777158785, "uuid": "506d7170-40fc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "petit-fire-1.dex1lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777140669, "uuid": "228f5afe-40d2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "petit-mond-6.dex2lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777150866, "uuid": "e0e56ec8-40e9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "petit-star-6z.sylo3mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777145765, "uuid": "003cfdfe-40de-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "petit-zeit-8.qiv5moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777124226, "uuid": "d9c75a24-40ab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pixe2-zone.zex3liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777133348, "uuid": "16cebee3-40c1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pl4sm-flow.nov7liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117745, "uuid": "c3021531-409c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "planrec.bexla2rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777089125, "uuid": "1febe4e1-405a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-str34m.dex3lavan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777089544, "uuid": "19fe6a99-405b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "publish2-mount.bexla9rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777122485, "uuid": "cc2a6b6b-40a7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "publishbark.zex3liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777131188, "uuid": "0f89ec41-40bc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qhsd8888.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777123145, "uuid": "55c8c633-40a9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorforgeet6.zex3liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777125125, "uuid": "f1f60e42-40ad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorlineex.rax5pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121767, "uuid": "2026d9a0-40a6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quormesh1os.qiv9moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777125965, "uuid": "e6921a67-40af-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rain-line.rax5pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127766, "uuid": "17af88c2-40b4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "reagentcore.sylo8mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777102685, "uuid": "b299d43e-4079-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rntfvps.to9varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777112227, "uuid": "ea3f4be1-408f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rockconvoy.kymle1rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777153744, "uuid": "944b5633-40f0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rouge-3.nov2liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777079164, "uuid": "ef2a6098-4042-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rouge-6.caissonnarc0m.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777146845, "uuid": "83bda87b-40e0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rouge-6.zex1liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777139592, "uuid": "a0fa9667-40cf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rouge-7.dex2lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777159451, "uuid": "dda14a6a-40fd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rouge-9.dex1lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132386, "uuid": "d9769758-40be-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rx64iv.nov7liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777087448, "uuid": "385db3c0-4056-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "segmentash.dex3lavan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777114510, "uuid": "3b064f7a-4095-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sermarkos.miv4soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777099507, "uuid": "4c8db006-4072-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sernexor8.rax4pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777107484, "uuid": "df303304-4084-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "serven5um.nov3liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777102264, "uuid": "b78d7b20-4078-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "server-scar.to9varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777113909, "uuid": "d46d271d-4093-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sknrzs3z.miv4soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777121528, "uuid": "91881637-40a5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sng2kb.qiv9moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777140429, "uuid": "93c06a48-40d1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-4.dex2lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777159807, "uuid": "b19f3f69-40fe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-berg-6p.dex1lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777154410, "uuid": "214002f0-40f2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-land-1.nov2liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777079645, "uuid": "0db6d370-4044-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-land-4.caissonnarc0m.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777147145, "uuid": "36f3bfa9-40e1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-wald-4.zex1liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777084986, "uuid": "7d420e8c-4050-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solafirmw.miv7sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777127650, "uuid": "d2e7e38b-40b3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sonra.eutialyson.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777107965, "uuid": "fd79a946-4085-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "springledg.nov3liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097171, "uuid": "dbf44099-406c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "starwinter.rax4pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777095788, "uuid": "a38127a9-4069-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-n3uron.zex8liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777115466, "uuid": "7459811f-4097-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "summiceda.dex7lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777086606, "uuid": "4267f527-4054-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "surv3y7-plate.miv7sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777089006, "uuid": "d93e5fb9-4059-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "svvift5-trace.dex3lavan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777108684, "uuid": "aa758c4d-4087-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "systelaun.nov3liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777104366, "uuid": "9c261e54-407d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tercheck.kymle1rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777090206, "uuid": "a47995eb-405c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "theormot.bexla9rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777128433, "uuid": "a5b6aced-40b5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "theorypin.sylo8mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777104663, "uuid": "4dac46f4-407e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thick8-signal.kymle1rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777123564, "uuid": "4f828030-40aa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tr4ck7-plate.zex3liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777087625, "uuid": "a2401814-4056-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tracesound.dex3lavan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777085224, "uuid": "0b11b137-4051-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tri-fluxa.miv7sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777111087, "uuid": "427b055b-408d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trigg-crest.rax4pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777096390, "uuid": "0a7f321c-406b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultra-f1rmvva.zex8liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777112707, "uuid": "07dca5a0-4091-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "valehar.nov3liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777114870, "uuid": "117235a9-4096-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "validatorgri.miv4soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777097471, "uuid": "8eda5c53-406d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vellithal3.rax4pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777122727, "uuid": "5c66e52e-40a8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "velmesh7ix.zex3liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777105206, "uuid": "91258b42-407f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "veltide4a.kymle1rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777156924, "uuid": "fb2ee21b-40f7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vert-1.miv8soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777076888, "uuid": "a21c598f-403d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vert-2.cicada-tkacki.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777151171, "uuid": "9697ce2e-40ea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vert-4.sylo3mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777137972, "uuid": "daf43b9f-40cb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vert-5.miv6soren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777144265, "uuid": "81d5dec2-40da-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vert-9.qiv5moren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129090, "uuid": "2d404dda-40b7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vitalpur.sylo8mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777106585, "uuid": "c6faa131-4082-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vor-spireos.nov3liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777095191, "uuid": "3fb7d5e9-4068-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorcrestix.zex8liron.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777089906, "uuid": "f1bace36-405b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorforge7al.bexla9rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777099865, "uuid": "215a5068-4073-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorlithen4.sylo6mer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777143244, "uuid": "21cfff31-40d8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wald-baum-7.bexla8rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777129510, "uuid": "276fdf53-40b8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wfamakg.to2varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777117506, "uuid": "346ed7de-409c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "workersolar.dex7lavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777133946, "uuid": "7b808556-40c2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.italiaregina.it" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777131665, "uuid": "2baef833-40bd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "x1ov.to2varon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777081624, "uuid": "a92fb488-4048-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zeit-1.excavat-toponym.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777148825, "uuid": "20536133-40e5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zeit-2.rax7pavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777155185, "uuid": "eed7075d-40f3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zeit-berg-4n.nov2liren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777142586, "uuid": "992a4066-40d6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zeit-land-5.bexla8rin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1777132988, "uuid": "4052d3af-40c0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zencorear1.nov7liren.in.net" } ] } }