{ "Event": { "published": true, "date": "2026-02-17", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-17", "timestamp": 1771373722, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "29ec9ee7-9c38-4f0c-80fd-0a3a35e0eb10", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0af8be7c-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "e15eb8a2-7a0b-49a3-8155-59371ad7b545", "comment": "Malware payload (Mirai)", "value": "b6309759d3301d30ca7ca7f6c2fae041", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "bfd83bdf-e6bc-4edb-8f24-22ea73fdfe76", "comment": "Malware payload (Mirai)", "value": "c8b36c9da4bdd719b36ba6f9fa1cb1f1222a87950dc9fb6a247d684e33b22284", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "7bc0fa81-1b9b-4510-8958-d1b6fd764e19", "value": "T1CA534B02B31C0A07D1A31AB0253F5BD197BBEAD022F4F684751F979A96B5E361182F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "f955ff40-174f-43ec-bff2-72d10f5344df", "value": "768:qkaZjEoakZNRGHRnDmX7Xm+t/UGV8+BCpEMTj/J9KCrMvuBxANUr6FV+tMiwWDIC:MvolWm+phBgd/KCAWBxANee++bWDvF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286589, "uuid": "f51606e6-4cde-4883-abf5-28cb370933a5", "value": 62988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "ecee4724-8b83-43bf-affd-2753108aa195", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0afb7f4d-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "fbb864eb-0b54-4763-9506-924752f8c80b", "comment": "Malware payload (Mirai)", "value": "15034caa3f996618a0b5e970ef953d00", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "5edeb55a-4d99-4d7c-adfd-5467aa9aa429", "comment": "Malware payload (Mirai)", "value": "77d8721cd22e77550b4e0739c889238e684e31c8897b569e936f60812c8dc5df", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "c67b2e66-deef-41e1-bda3-db7dff1068ae", "value": "T16303E751BC829A37C2E1137AB66E4A8D336167E8D2CF7217DD204B207AD651F0D23F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "40a09050-bbb0-4f0b-944e-77257997c91b", "value": "768:kg4QCbvsG5f0OlnlUlQOBFdApwAUb9z/W56v+b8O7LDUXoTr/NwwW:kRbEG5fXlUlbH4aScv+/UELW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286589, "uuid": "3f95641c-2248-4395-9c6e-c2375196a554", "value": 40748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "f14fd88d-ae91-47b8-b724-922da73d148d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b014f6c-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "8eebd21e-9222-4082-9e98-f293e6118bee", "comment": "Malware payload (Mirai)", "value": "6d5ef34ce72dfcb2c90158fb4a2f63bc", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "826e31d2-4f9c-4a5c-8680-6b2136bacb6e", "comment": "Malware payload (Mirai)", "value": "baaca57ea05a7f0a57cf65c27ee615effc19fae9913fb21e76c32cea21a278c8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "3583d2da-003c-4506-9b5f-cfd2b453b313", "value": "T131534B17B58280FDC09AC1744B2BBA3AD93775FD0378B2A677D0EB262CA6D211E1DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "e2c4885f-c5a5-424b-be2e-7a8791fc22f3", "value": "1536:dpmbSQ6U3q7cCBT/lZsK/0DiQfYLiKimfFoktCe3fYRMX:WShU3q7cEDlCK/0DY9i8Fok06fYRQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286589, "uuid": "48a884b7-9214-41b7-bdd5-f7b673e5609a", "value": 63296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "4b5f394a-c04e-4018-a06e-d339663b74f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b1461e3-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "b34b2dab-c08f-4ea4-bfa8-9389fa4fb6c4", "comment": "Malware payload (Mirai)", "value": "765919ba859d30f834d3cf1a51941445", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "fdf64e75-de88-493a-82a1-dfeebab5a3c1", "comment": "Malware payload (Mirai)", "value": "e635dc4f49eacd822f6f417c611d1fc3f888280c8c43886ee4dd3e5566d1ede1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "38966f93-ba6c-412b-b8da-f0682ab71750", "value": "T14B83A51E7E228FADF76D823147B74E25A69833C627E1D641E16CD6012E6034E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "3f734146-cea6-419a-932d-0cb4c3e71250", "value": "768:2ty6IP7M/kq0INRhfuN2Eo9tl/de2YIwHKRH0I84EH6UTO7ZDYovZ73x/nL8y8QD:Rakdn2Eo3ePu5GTORYo99Be037Wc/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286589, "uuid": "d6b1fb07-5295-425d-b8a7-5d92debab16a", "value": 84780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "cb99e73b-3cf3-4c2c-9acd-fbcfc82540b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b14df83-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "3df907dd-5fc3-41f1-97c8-219b9955957c", "comment": "Malware payload (Mirai)", "value": "144e366da74683360054c68718f7bfc3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "c1801d7a-3d51-4974-9db2-ae22a79ea53b", "comment": "Malware payload (Mirai)", "value": "17cb55ed8de9146032299bfe90c81e26b2a21239ecd62e9f0e303def4b71614d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "0f306b04-7682-4e1c-96f9-44691123fb04", "value": "T178633BDAF801DD7DF81BD77A4857090ABA30B3D502831B376397B9A7BC721A81D12E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "6343b4cf-4232-4389-aa60-35181220535d", "value": "1536:3IgNIzNo6+0jDYfRW8VB3a1oxf6P9dJzGLotJ+ChQwu:3IAIzGqEfRHa1yfy9/zYChxu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286589, "uuid": "1bf79fb7-3ed7-4076-8c43-f1aa56192a72", "value": 69632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "114850a9-a1ac-49fd-a564-a450b205449c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b14f3cc-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "67b978ac-c3a8-405e-bda4-9e1645c9124b", "comment": "Malware payload (Mirai)", "value": "c0cfe05be9bb191596a6d1b6744b4a55", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "81d3f6b1-4757-42c3-b2b2-13ebdeb61b9b", "comment": "Malware payload (Mirai)", "value": "5ce46bb5bb8d83d082b192184df8e352728713b91752e1fe9c5ed3bbdcfb78d2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "3d32f028-5aba-4609-81e1-387b08e54713", "value": "T1F683D606BB510FF7DC6FCD370AE91702348C594A22A97B367634D828F65B24B59E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "a2c8921d-92ee-4064-9d29-fc75499bf685", "value": "1536:iVLyu95Keikj752dCexuV/8UZlDwfkJ4MYfWI:iVLyMgOFezxu5VD1eR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286589, "uuid": "6814d931-d8f6-4cc3-a0d7-a2cb8dc77454", "value": 84780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "e961e577-90a3-4f7b-87a9-373d13ffa7f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b59f725-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "35f7e03e-1501-499d-a305-8a0f861f7336", "comment": "Malware payload (Mirai)", "value": "16975dd7b97bbb01c082a526a543dbf7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "1e102ea8-f383-4274-ac6d-1465ceac1706", "comment": "Malware payload (Mirai)", "value": "7bb574077868abf5750ef9bd088acdc8e7705c91a4a85ff6db0a7827a4f1a9b8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "4a2500b9-ea8e-49ae-95aa-01aeafacf0f2", "value": "T188632851BC819A13C6D1127BFA6E028D3B2623E8E3DF73179D225F2037C696B0D27A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "100abb6d-9fa3-4984-adf1-a6f5c49d1ab1", "value": "1536:iNSlxAmiik110lOO//kWUjRVisI3AA8PNRu5AvbW4:iN/CbkdlVisI3/+Vbh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286589, "uuid": "a5bc2c63-c99f-43eb-975e-b7bd2b701c21", "value": 66916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "1d6ca28d-4dc2-4a1f-a8ad-27121492590a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b6b6356-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "cbd995ce-cef0-49fa-a7f1-db399f9f3960", "comment": "Malware payload (Mirai)", "value": "6e3e238776bfeac54da7ae49ae78867f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "75c6fa83-d5c2-4050-b9ea-5996b0b5b41d", "comment": "Malware payload (Mirai)", "value": "cfa5d5f9016becaadc1660ddc6297c1eb727239f81dcff15315d38fa6f29febf", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "2e531a1d-5e61-407e-a5e7-0bb46ca7dc04", "value": "T1ABE33C56EA408B13C0D61779B6DF42453333ABA493DB73069928BFB43F8279B4E239", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "49d579af-08f5-4daf-a59b-419aafc85f14", "value": "3072:CJLce3pC5mD7naLHbz4N9GUJURIJ1FvEXkkTM/9oIMY:CJLce/naLHbz4NMUJdHvEXkYM/9LMY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286589, "uuid": "941e04b5-777f-4147-976a-afc8d1168f34", "value": 150594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286589, "uuid": "f74979bd-8c10-4a3e-9a2e-105e944ce38b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f484fbf-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286596, "uuid": "3388b1e5-53a8-46fc-af59-bf8e65351b9f", "comment": "Malware payload (Mirai)", "value": "643ea5dcb4ca4230386e1469b49cf670", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286596, "uuid": "d3814cce-d53e-4ae3-9bd0-3111f6fd9ae8", "comment": "Malware payload (Mirai)", "value": "07d009db915ae2f3e7483241f32478e75b5fe9ac1a836cfb6a6db96baa80329a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286596, "uuid": "fb8efdb3-7ffc-43c3-aa2a-c18d1e7ed45d", "value": "T1B2438D36E96E1E74C08641B074748FB56F23B4C883572EB61AA9C2795483E9CF504F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286596, "uuid": "29579134-1503-4f64-b288-c283bd060695", "value": "1536:9aa0brW/Od9hlCRjK5WKQXACspfDCMx2+Wg:9v0brWGd9Xl5pQqpfDQ+5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286596, "uuid": "06127db5-4571-41c9-8c64-326095da2014", "value": 58740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286596, "uuid": "21bdf59c-9ff8-455e-8313-be87f8edafd5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f4d56c0-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286596, "uuid": "4e65da7d-e25b-4c16-b614-aa681f130d65", "comment": "Malware payload (Mirai)", "value": "b434fb52fe7e3079046c8cbaaaf5708a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286596, "uuid": "c97055b7-67cd-426b-a47a-28584d57f23c", "comment": "Malware payload (Mirai)", "value": "33aee8ae5b2454a6366fff8e875b5b3454c34f3d5dbc8d6eab0934d4f8e4bdd6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286596, "uuid": "907e06bf-d3c1-4b3f-a9fb-92ea613801d1", "value": "T17F730856B8814B12C5D5127AFA2E118E332317FCE3DFB2129E206B2477C696B0E37D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286596, "uuid": "4d8b9984-9d39-41be-bd9b-6af9df0e3b50", "value": "1536:2ln25xPBXk1wnnkL7+KE007sxdEya6t0bIeiNNfsvHTGcV5GYIWd3:7xpXCMkM/+za4NfsvHqcVERM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286596, "uuid": "5a99eb14-be79-4c49-99fe-009c57f3fa7f", "value": 79160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286596, "uuid": "3c6318f1-5497-4268-8980-4e7946ef9178", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0fb58b08-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286597, "uuid": "105b1ecd-dff4-4486-ade9-02aaa5b95dcd", "comment": "Malware payload (Mirai)", "value": "b65c3ba1f5968b330361c4f062180b0e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286597, "uuid": "7c0e39f4-9579-40e6-b556-73f8e295b854", "comment": "Malware payload (Mirai)", "value": "e081389159aae1c758b34b9f69cef16f25c14b6519c43e174f5290b46f240a35", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286597, "uuid": "c81b0efa-1588-4013-8d04-1206a3918b8e", "value": "T13E436BC4F643D8F5EC8705702077FB379B72E1E922A8D647D3B4DA32AC52651E606A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286597, "uuid": "5a31f079-4196-447f-b4a0-4e5939fa3e08", "value": "1536:JeESt/basV2rcZhG6ySN7natpW1ZzWOIaEjrqMCs:JeESt/basVTgS7natw1ptXESx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286597, "uuid": "d7c7a28f-6835-41d4-8241-b8d4d7664503", "value": 55632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286597, "uuid": "330868fa-f67e-40aa-8d6c-919d62f8a4e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33915963-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1771286657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286657, "uuid": "effb9b46-1c36-4594-b8f9-ad48e101238f", "comment": "Malware payload (Gafgyt)", "value": "5966e12c481c8908606a625ae3dbc4f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286657, "uuid": "d425bd15-78d4-43ea-bd11-9973cb344104", "comment": "Malware payload (Gafgyt)", "value": "210c6a24361ef65a2950cc37aee4f95bc51c4f91db9875f8cd58b876b1af9602", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286657, "uuid": "f7f06de4-7d55-4290-bcbd-cee57b7a3672", "value": "T16A63F945FD459B27C6D332F6FB9D078D7A2A1FD8A7E6310299346FA033C6AC129395", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286657, "uuid": "04208a95-34e0-46c4-a8c7-83d3d30c6992", "value": "1536:Y510WPyaX7KF/yIg4iqxXOyC7xGGZMAvw8i:pWPd5q+7r7w8i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286657, "uuid": "7c5f5b70-72b8-4432-b7c6-6ef0d84cf54d", "value": 67092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286657, "uuid": "7161d0a2-1904-444d-b4dc-c21e50f87b49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33933f13-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286657, "uuid": "cc2af336-384a-4a9d-91e7-c7a7f82ef75a", "comment": "Malware payload (Mirai)", "value": "c4dc7005d3a18ba162359591b3fe959e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286657, "uuid": "b629c593-af0e-43e0-9d6d-806ad49789ce", "comment": "Malware payload (Mirai)", "value": "f557a12aedb5bb9e26abd4f780f7e48e1bdc34424d24218f1e413ff32d6d66dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286657, "uuid": "2b731a9c-9926-426b-926a-3181f38861ec", "value": "T162330912BB42DA73D01310F112EB9F515933FABF28A2D596E3747DB0AA151C0A612F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286657, "uuid": "a0f134ae-6ede-4770-a8f5-05dadac0c6c4", "value": "1536:+mM1Ft9tpjJggRdotARSlEwyWpi0PqUu4:+m039tpjJggR+AwlbQ0PL1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286657, "uuid": "6c089b7d-e167-45b7-baf1-34cf5118785b", "value": 53936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286657, "uuid": "cb8f65b2-ed65-4cff-9438-1325301e3237", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51352964-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286707, "uuid": "0a5168fb-9111-4c66-8e2d-3e2a8e80bfe2", "comment": "Malware payload (Mirai)", "value": "51659bf3c94b327e98285f5edbcdc1fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286707, "uuid": "ddfcedd9-ef9b-4ca5-a4fe-2d46af2eec68", "comment": "Malware payload (Mirai)", "value": "b222ae3e2a14c2ba960f174595923c4db3d90030e92ba8f2c45e39c8a4914861", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286707, "uuid": "b793df8e-aa81-4ead-b129-b24a9a38892d", "value": "T1CC432952D9226F77C047A4F160F95E311F26BCD65A8F1A966075ABE0024F6CDB00EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286707, "uuid": "6dea6dff-b223-44f3-990b-49d43552754d", "value": "768:1HDcludaZdFiHo5eR6MafCqUOtVA+4lRMKFmhFLaruohOfvpoC0ID:tcluQ/5eIffAuKFmhFmrS6C0y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286707, "uuid": "dde3ed47-42dd-4072-ae41-2f7e87013b15", "value": 59680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286707, "uuid": "3935ceb7-ced7-494d-b7ca-d75bf805eafc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "568fd6ac-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286716, "uuid": "b8ebe429-b131-4b6a-8b16-b383eae75dde", "comment": "Malware payload (Mirai)", "value": "5a05a5f2db5594c9ceb07ae224d7c428", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286716, "uuid": "1e3e6a18-4be2-4a8f-9a5b-ef99eb25a7c7", "comment": "Malware payload (Mirai)", "value": "a55c7895e856356915105936f3a850521fc8ded24cae1e6320d72ddcc0d46a27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286716, "uuid": "bb9a0302-fa35-4503-a1e7-09bd44b9b810", "value": "T12763E597F801DFB3F40BE67A45D34815B930BBE60E921A72726339A7AD360D51823F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286716, "uuid": "b2d00122-7757-43e0-aa12-407b7e5a6f74", "value": "1536:rYor1ZytTnWqLrD8GA0Dz1yXJk1439OSH01iGM0C:csZy0qPZDz1yXJkS39uMD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286716, "uuid": "13d83774-3c81-486d-bee9-a500ee1e74bb", "value": 72096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286716, "uuid": "8572239e-0d3c-454d-ad13-9dac83d6b01f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5969315e-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286720, "uuid": "135bf86b-101c-42cc-89f9-cf1fa01aedf2", "comment": "Malware payload (Mirai)", "value": "26823d4587d1988887f4021776a938ad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286720, "uuid": "4fd8b52c-23f6-4aa6-ad38-3a15e50dec0d", "comment": "Malware payload (Mirai)", "value": "42a838a30674fbe98000a59d99697ba6f874e07f422f0c957c832f64af8d3b5f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286720, "uuid": "ef07b524-ad82-4923-8d37-626d80bf7bb7", "value": "T1E3331A56FB03CBB3C84301B102EBAE6A5D31FEBA5871DA85F3647DE4A6124D07502B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286720, "uuid": "aff8550f-1338-49dc-9c21-69c8958cca03", "value": "1536:jITcfGPwnVjAWnpdzTk4S3um7qasEGWqejlE:kcfGPwnVjAWnplvS3um7hPzRE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286720, "uuid": "4bc79e94-0f38-4f0f-822c-0619f19c1783", "value": 54704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286720, "uuid": "3678067e-01dd-45c7-b31f-5675978966e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a52120b-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771286776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286776, "uuid": "676d9eac-f530-4678-9417-54aa2862df59", "comment": "Malware payload (Mirai)", "value": "a17f83df4cbdb707b566e08c6d5cbc65", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286776, "uuid": "b4ff4d31-3b1f-4a02-83e0-db9e7123ecf5", "comment": "Malware payload (Mirai)", "value": "f76cb52a25ce16209994cefe09b819fae41b7375a4f63d114fb8968cc36d0c2e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286776, "uuid": "7aa4770f-0b3e-4127-9175-ccc6edd709d3", "value": "T14C530945FD459B2BC6D332F6FB9D078D7A2A1FD8A7E6311299306FA033C5AC129395", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286776, "uuid": "a5346155-52eb-43d3-bd77-56155675f18b", "value": "1536:yMv0W3q6X3KF/XIPAm4xXOqnDsE/HF3b9i:cW3Bj4LD5Hx9i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771286776, "uuid": "58e517bb-b3ce-4248-bf9a-3ee98f4a21bb", "value": 65688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286776, "uuid": "7806865d-ea1b-4832-8be2-c56a49966a18", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1771287431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771287431, "uuid": "9c1b33be-8d9f-4b8d-bbd1-c3479f178b18", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771287431, "uuid": "a6b76fb1-b4f8-4ffa-87bb-0c0674a4e57f", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771287431, "uuid": "95d2a168-08e9-4a28-9065-48c7ffe29c8e", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771287431, "uuid": "aed5da79-3a10-4ca0-abdd-e12031ae69f2", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771287431, "uuid": "0abab2d3-3a0a-47c1-8894-90e9c196b081", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ca74b56-0b96-11f1-8369-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1771287612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771287612, "uuid": "dc7a09a9-e758-4fdc-846b-5e962e198096", "comment": "Malware payload (AsyncRAT)", "value": "2117ffb82d562e834c5850de5b3055fc", "object_relation": "md5", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771287612, "uuid": "e92959b8-1231-4b67-9c24-98f26cf85ab0", "comment": "Malware payload (AsyncRAT)", "value": "524603744cb5c25d48d0cf240b4f2aef43cd74904e6433098fce796e51f8837d", "object_relation": "sha256", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771287612, "uuid": "dd67ee7c-8b77-41ea-b378-d2d77453ebad", "value": "T1E47613B694100DE6411D4E3BD1381FE47EA8C3873B327929E716CFDBF246819A63B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771287612, "uuid": "cb8f290e-0f83-4c5c-b69e-c156a18a4091", "value": "192:UZxa0RSUC9OMhZIE4QIGUpjU9jHFTGUaKzMxUS8UMtBb9Ih+vIOMZJq7nz77K4F:U7akS7DOR4haPjUC4F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771287612, "uuid": "d48730df-458e-46ce-8b8f-d8653fd61e7b", "value": 7161684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771287612, "uuid": "42298571-b066-4886-84c0-d2b6404390d1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d68b6dd-0b99-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771288794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771288794, "uuid": "241073b8-6a2e-4481-acdb-ef37ed519f94", "comment": "Malware payload", "value": "4500066de1b1dfadd314442123b76d07", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771288794, "uuid": "8365ceeb-08b5-4f95-b562-763260af24fd", "comment": "Malware payload", "value": "fef447b8a74dac02760330fd0c48973391d05014597bab95b01c3424476306d8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771288794, "uuid": "271d4509-0921-47ee-b1dc-32164d952ccc", "value": "T1BEC0EAE8416909B30D94AA1460739ED0E634A7BC96417F28A0644E695808602FA4DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771288794, "uuid": "0165761d-d418-4ee1-b493-6a43c75e5428", "value": "3:TKH4vGBwkSDk3LWEXK5k9IjItaRUa0dhAxIjItaREKGX9IjItaRM:hBDCDIjItaRUajxIjItaREKOIjItaRM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771288794, "uuid": "4b6e900b-e541-4128-9cd3-1e83716e5323", "value": 163, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771288794, "uuid": "952ef701-2e79-43ce-a062-956589d70993", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1771289003, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289003, "uuid": "950e769d-43ca-49d6-9618-ccea22eba00b", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289003, "uuid": "06d038c2-cb68-46b3-ae84-757866eb2dce", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289003, "uuid": "0f80ed8b-ce80-49e1-ac5b-0547840d2354", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289003, "uuid": "342f7b1b-6d8e-416f-a0fc-83d5ef3f441c", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771289003, "uuid": "9398f94a-89fc-401a-891b-74da3be73cc0", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd4e6e48-0b99-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771289035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289035, "uuid": "c391f3e4-f848-4a5f-ae2e-dc0f392c38a8", "comment": "Malware payload (Mirai)", "value": "9c605d0b0db5679af7aa82edadf17bdf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289035, "uuid": "f67dfb2e-aa78-4c63-9525-c47a84129092", "comment": "Malware payload (Mirai)", "value": "53fb40ef825c64abde9062adf6d31f604f9d1bfc1d08c51ff401c442d90e58d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289035, "uuid": "05a88dfd-0430-4ede-92b8-7e25ab2854d5", "value": "T1853318D6B401AE7DF95BEFBAC0224909FA31620151930B3B23BBFD936C322658D52D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289035, "uuid": "36ddf610-bf28-492f-b8dd-f9057a0f26db", "value": "1536:Wlrztlv7LlNvi2hoHDrECHTnJ1/iVB539j82:q7lFizrEATMB5tZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771289035, "uuid": "4a38d98a-1eb0-4b63-a252-9c7556098e30", "value": 52492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289035, "uuid": "54fe4e62-7b5a-466f-acc7-7af2ac77ece9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b1c4395-0b9a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771289193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289193, "uuid": "e242dc0f-adb7-4c83-a768-ee48027008aa", "comment": "Malware payload (Mirai)", "value": "815c56ebf8ebc4b5b6571783128356f9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289193, "uuid": "c02c96ab-56e7-4166-ae2b-5b9acc023bcd", "comment": "Malware payload (Mirai)", "value": "5d7dcaf23c98e7484895af9a1cd14af57b0159dfd02c11ffa79f2d34f7fc112c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289193, "uuid": "b1485ada-876a-4944-91c3-468a6cc9cb8f", "value": "T167B31763DE5AAF1AD617A1F0B2F28E741B53BD6548470EB9A472EAE04143CCCF5053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289193, "uuid": "99299931-e428-43a5-ab56-a89490a8da64", "value": "1536:NTqZ5Rb76lsC9eK3q0U7/mGJrTlJMzW5sMDzpGeTAEXGy:9qVX6lsoR3YFJrhezW5lDzplJXG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771289193, "uuid": "fb293725-813b-4a40-bd3e-feea1638ba5b", "value": 110108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289193, "uuid": "135794aa-b66e-4157-b821-40a199cf38cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2902ba55-0b9a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771289216, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289216, "uuid": "d367d67e-e1a3-4b2a-8057-5513ed27a32a", "comment": "Malware payload", "value": "8c591ff69dfbe18adaa8b430f5846bcb", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289216, "uuid": "e9da8eca-7c4c-40f8-90c6-be2774209dfc", "comment": "Malware payload", "value": "ba7c65e11e91f816193a42dfb05f23efe111d9442310e11ca10c0d137116a8a8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289216, "uuid": "5a377e14-7de3-4883-bd9d-4bd0134cdcd0", "value": "T1FA162310EC9E8DD507B8AA2520AE9D0436E04B978C0975953FDC65EE4F6FA4F04378", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289216, "uuid": "f3a2607e-dad1-45aa-9189-d59116c5b906", "value": "49152:SNqWxAyNIGaFWvYUqw1NR0+xvoGO4NEXzxhbEQwrBtNZ:K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771289216, "uuid": "2288d430-b419-4e71-b78f-d3bdba11d708", "value": 4171409, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289216, "uuid": "d6dc12d4-a1fe-4726-ae93-d277165cdd23", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "352e30e2-0b9a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771289237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289237, "uuid": "882faf25-b121-4f96-9564-9c4a481fb8f5", "comment": "Malware payload (Mirai)", "value": "fe0d0ca2bae43761ebff0f1f6fd4fed5", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289237, "uuid": "da85e5ff-6061-48ac-837e-1c87fd34b826", "comment": "Malware payload (Mirai)", "value": "bd20ebbc3b15a3a05d0011ea92f3d7088ffe59b931d5f40f8a1051123bddae18", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289237, "uuid": "b1cf2f7c-cbf2-4dc0-9119-b918fa8c9874", "value": "T145A31B52BD42CF17C5C261F6F7AE42483B126B7CD6FE3142E924BFA127868DA0E275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289237, "uuid": "5d9efed1-97e5-4ac2-b26c-aeffd1265412", "value": "3072:VbVXNPbe1BvqOEAhMKVMu/Pie8L7xLWi:VRXNDe1QEhMKVfS7xLWi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771289237, "uuid": "1ceba3fb-b7c9-4cb4-9945-ad790a353ae1", "value": 99784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289237, "uuid": "ac6ead9d-694f-4b03-b1db-64b2e844499e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af02be9a-0b9a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771289441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289441, "uuid": "2d387cb4-56c6-4adb-b323-94b0a9d71734", "comment": "Malware payload (Mirai)", "value": "1ea4d5b78481dae6ef7c65ea0bcb94b0", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289441, "uuid": "e032d142-59eb-4fee-922d-5b68c32c97bf", "comment": "Malware payload (Mirai)", "value": "8ac4ee7362fa7a9f3104986d568842e795b2a5bbbc9707e43da0a0b01a0eac84", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289441, "uuid": "3ef23cb8-6b35-40cb-a61c-405ec275319d", "value": "T13BD47D9CFE5E3C42E2D7E2789A4987E1731B71E4D32391A33982430DD5CA9E9CBB15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289441, "uuid": "2de4d5b5-a4f2-4a00-9375-650350380b87", "value": "12288:qX1WY/PthMOM5YTxYYovqcWQZA0rAfFsaFqZEAnFw5nzUB78n6WM:m1W6PthZaVvqzQZxr+wQE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771289441, "uuid": "3ac46641-fd8f-4429-b153-3675baefd13d", "value": 653632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289441, "uuid": "86e92747-5630-4b11-b503-a40b74778ff1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5adc350-0b9a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771289479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289479, "uuid": "de591afd-ac22-4f34-b996-f0dcfc9acc2d", "comment": "Malware payload (Mirai)", "value": "a2a7f4dedf39609d15b32fbfacda6795", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289479, "uuid": "5a675d49-4802-4501-91bc-5d441b1b27f3", "comment": "Malware payload (Mirai)", "value": "9ba736346978bf44972f6cb10430062eba95d9c25ff148ab2414da40ed281df2", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289479, "uuid": "c66082c2-1c13-4a6a-8332-69d2b265ed05", "value": "T1F8C31856B9919B11D4C721FAFA9F414933136FBCE3FA3102DD206F64278A99B0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289479, "uuid": "3cc339e4-3471-4c97-a413-d00569b07bcd", "value": "3072:baj4dpin8kDKziXmUsaFrZTIMdxzsfweXL95LE108+:OyQnhKziFsaFrZTIMdxQfwMp5G08+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771289479, "uuid": "239082c5-4c6d-4531-b020-428871195d3f", "value": 129692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289479, "uuid": "d41e7283-9a73-4468-bdae-8ccb99ee5cef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a51f807-0b9b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771289782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289782, "uuid": "363291cb-bd8e-4a15-bedb-51d21c5474f6", "comment": "Malware payload (Mirai)", "value": "5dc5534014f506744a58fe24bd04ff3f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289782, "uuid": "fedd16de-2025-422d-a395-f1341002fe42", "comment": "Malware payload (Mirai)", "value": "f21584c546ffdaa1ce67993cf45cde223bfbeb166c2641effd76c29f519eaa6a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289782, "uuid": "45029558-f89c-4e72-8ad1-0e48820a971b", "value": "T15D231852BC828A56C6D42376FA6E118E3322B3E9D1DF7263CC205B013AC991F4D77B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289782, "uuid": "966079f8-e214-4b2c-85bc-e24465efc098", "value": "768:dbflCAITb1lI4z8g8IgrgEVm9YrLOHsXBuepi0eRqh1V+6og6clwBNKEtE:BoAITvBbHgJLOWB9pi0eRuP+xQU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771289782, "uuid": "cf90f2e1-725a-4429-928c-a368a02c2ee5", "value": 46320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289782, "uuid": "19df6a5f-515e-4830-874e-b1148c87fe57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86845428-0b9b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771289802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289802, "uuid": "aaa5d8ec-1321-4b3b-aa54-150256eba9b8", "comment": "Malware payload (Mirai)", "value": "4ca5991458603938ca46a53d0fbc4bbb", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289802, "uuid": "077ee01b-af78-47cc-9792-a7766573292c", "comment": "Malware payload (Mirai)", "value": "7a24ba92d014446a7c74cea78e90b01787778f58977ef1b68db17013253e57c1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289802, "uuid": "7330bde0-18dc-4bd5-a434-cac2ea906827", "value": "T1BBE07264105631963E430E50762BBBC231806C45AA10062EE3B8BE234CBCF017B0E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289802, "uuid": "6182ab87-76c3-4571-808e-211e048420a3", "value": "6:hdc4UJ0OXOZYzBqlQXZRlzTjafaqUZtL57bNwb:XyOZYzYlE/jaC3THGb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771289802, "uuid": "4a3223c5-3d4f-4e5f-8329-a4eefea7230b", "value": 331, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289802, "uuid": "5295cfcb-b5e9-4069-b071-77bf0bacf054", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "895d920c-0b9b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771289807, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289807, "uuid": "6b8e82d6-9072-4dbd-9162-e8bbae60f7e5", "comment": "Malware payload (Mirai)", "value": "2808f2da7b5aa2af444c415bedb760ce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289807, "uuid": "ef40b0b6-a1b9-490a-ba17-8a6d948beae8", "comment": "Malware payload (Mirai)", "value": "7be8158bcafce0606b388ced9fdc6cd12e43136090c2e73f9cfdd96b5c756a9b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289807, "uuid": "aa94f1cf-2742-414e-a4f1-46805a4e8fa1", "value": "T1D8435BC5D553D9F8DC1015393077FFB25A76E93E1028EBC7D7A8A932A942A03D8072", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289807, "uuid": "51f2146c-fe0b-4702-943d-dc86c7dd1ee5", "value": "768:R3HT2eWvWWgb3sHazDDbraXqNmpQ20U/HYznpWYdTZVZtOfxcX2K:RD5Wgb3OazDnraXqoz1spWCTZVZt+xc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771289807, "uuid": "6e367229-bd7e-4650-afc9-36e6ae7142ca", "value": 55840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289807, "uuid": "ef696996-e517-41d7-b5f9-45ca6565e5df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2766788-0b9b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771289849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289849, "uuid": "5b47e968-617a-4005-8859-dc515a0a6809", "comment": "Malware payload", "value": "949397e7d1817a66a43210c9525aa60c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289849, "uuid": "cf7feb06-8c67-4ee1-b0bc-045b8946fdf0", "comment": "Malware payload", "value": "e8527fe92645a1a8b5abc854814b3c2644eebba9fd53cd932e6848ccdd5f35eb", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289849, "uuid": "21d645b4-fb14-45f7-b594-9f4a7da080e2", "value": "T16B22B0C44BE0F65F7CBEC73681B0696455A68CDCDA1ECE06980CDF2C5CAF98581264", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289849, "uuid": "2284c747-c1ef-4540-9b55-6fe105554143", "value": "192:lVvHFlFHiAhpOo/hN9ipW1m5o8Go4fPixdRlV3pO6DGivk21rTfmP/jIzsrx+yf2:PM+pAE1mCxo4iVZO4913f3p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771289849, "uuid": "52141938-b11d-4e57-8ab7-9c6abb4ae985", "value": 9984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289849, "uuid": "15501699-c8a0-47d6-afb2-03714e4c14db", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfa12aa4-0b9b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771289952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289952, "uuid": "144d5242-ef5b-49f0-8ad9-3bb2df43f215", "comment": "Malware payload (Mirai)", "value": "7579b7a1431082f487fb642ea678a91b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289952, "uuid": "f9a4d65c-9e4e-48f5-99bf-ef81ff9319c6", "comment": "Malware payload (Mirai)", "value": "8ef45b9b5130ceefad36e943b9083515d91219d0f91eabde26d5001e2224718d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289952, "uuid": "2ae9a595-a82c-4561-9ae7-7e1d1c021b72", "value": "T18C335A22A8791E1BC0D0F87A62F78729B2F50B0F25A88B1E7D620F4EFF215D0555B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289952, "uuid": "2795a9a2-80b4-45b6-a053-0210900ec2dc", "value": "768:g+oSy7lGvzbq9Ghc1SuA+/5DugQk71JqILfuO+hhQSRF29:g+IlGvvSGhcQuA+/5DVP71rchw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771289952, "uuid": "bcd4d224-4ce5-46d2-8b7f-d59fff03bbb9", "value": 54724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289952, "uuid": "9d42bf12-5815-4365-a594-8c83bd3da7ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1587ebb6-0b9c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771290042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290042, "uuid": "26e46d7a-8ecb-437f-8a42-0b24d8fdf990", "comment": "Malware payload (Mirai)", "value": "4c2728c604d907498ecc2bec8b0bcaea", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290042, "uuid": "2e9dfb7d-4e99-4b69-a8bf-1ead23ccd2a8", "comment": "Malware payload (Mirai)", "value": "186dc7b3afa4f487c4fd7bbab1159eb7257f2e47ff9331399bff063b0948be99", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290042, "uuid": "71ed9a9d-9901-4ac3-8511-1ad493983fab", "value": "T1DBB32B16B992DB11D5C221BAFA9E514933136FBCE3ED3202DD206FA427474EB0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290042, "uuid": "ea281f3e-f939-4be6-8ccc-4e740fc4e55d", "value": "3072:XbsvZqDiwzipof7t60vaKsxujFbU7O1GPH:ovZquppofx6GaVuBU7dPH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771290042, "uuid": "dd8384f2-ee9c-46f7-b574-047ebf9c334c", "value": 111332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290042, "uuid": "f6f8475d-5708-4a12-a013-6657b89301d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "469295a3-0b9c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771290125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290125, "uuid": "df2bf803-1eab-4ca2-83a9-1ba54d103750", "comment": "Malware payload (Mirai)", "value": "c5a7fa663840c66cdb3e377c10951d77", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290125, "uuid": "7bed540b-d2a0-4609-856b-cd10e799ae4b", "comment": "Malware payload (Mirai)", "value": "192313bf471bc775fb86d932b5cb7a5dd76db692f7654333ee44828129591032", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290125, "uuid": "770bc2af-7437-4122-b37a-04aa370bd0cd", "value": "T10E84D08AF7562D83C5EBC5340886C645575AE19723F3834A3A476A7B3C193B78F2C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290125, "uuid": "e7fa38d8-5c95-4fba-8290-e844db1d83a2", "value": "6144:G5e9gio4ixnOlO152n000uv03PWw/kjXpG1WmDgpjmnN:yeujtZOlUYI/OXpG1bgpjmnN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771290125, "uuid": "4c2b6582-4b67-4f85-a1cf-615061ac0ebb", "value": 377940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290125, "uuid": "e7cf0aa8-e48d-487f-a45a-a049a58236b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50ba4159-0b9c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771290142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290142, "uuid": "c7681e83-1c17-4cf3-8347-1fa950e6b86b", "comment": "Malware payload (Mirai)", "value": "c4f0797ce4d288d1c175f751807711ef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290142, "uuid": "578c83be-51e0-4dac-83bc-dcc71257f831", "comment": "Malware payload (Mirai)", "value": "548a2a822a816c76ecc593289fe8cf0dc76ccd555360722986cb161c31703e53", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290142, "uuid": "9ba531cc-15ec-423d-a49d-4b2b60de7066", "value": "T12F331895BCD29A6AC5D423B6FA6E519E3321A3E8D1CB3217CC204B1437CA51F0DB3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290142, "uuid": "3982e6c3-0ab8-43bf-a757-1a4ed314f3e2", "value": "1536:bATmE7OY0qBsCiHRT+6g/r6rL2yBCNt5sQUB:bATmE6Y0vckvkbsQUB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771290142, "uuid": "a86cb51c-595a-4230-91d2-4546fbfed52e", "value": 53344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290142, "uuid": "547773be-2c6a-43b1-8f63-f53d8ad2989a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7acbe5cf-0b9c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771290212, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290212, "uuid": "57b6e5cf-7121-4bb0-91c1-d2caecc0fe87", "comment": "Malware payload (Mirai)", "value": "3c674e0c151f8685de82b27021ddfb12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290212, "uuid": "9fb9b9d9-3205-4cec-a789-c3da08e2d948", "comment": "Malware payload (Mirai)", "value": "735a0558cc6d85b3dd3353bfcb28308d8ddecb86108d5d40fd8a28f97bd56ba0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290212, "uuid": "760429f5-1dc9-47fa-a16b-a369308dff9a", "value": "T1A3043C53B7324FA0D365D2720BB38B595AEB11811EE198D1936CDA103E206F9689FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290212, "uuid": "96ebabed-8249-4643-a9d7-670cfe9bb26c", "value": "3072:knxBHuwe6Noa++Y/+I3c445WUN4k5pLF/6+Do+epL3:kxJumoJ+YVc4KLqkrF/6F+g3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771290212, "uuid": "ff47cbea-3935-4aec-8165-ab38090d6248", "value": 184960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290212, "uuid": "8ef9c35a-fd72-40f4-87e8-4795173012bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd803096-0b9c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771290324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290324, "uuid": "c01e3167-e04a-4af4-89e1-0fe555e3b882", "comment": "Malware payload (Mirai)", "value": "7538028d9303dd42af1255da0f961779", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290324, "uuid": "0ef3615c-de27-4ed7-98a6-52eb3a56cfad", "comment": "Malware payload (Mirai)", "value": "2e56c5a66a1444bd7a69ae6a3fab12c7899da9d7395f72fac7ff3e226edfee27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290324, "uuid": "73348603-6525-4bb2-a12b-5f882fb5c2d3", "value": "T110235CC5A147D9FCEC190A712177EF319BF6E93E1198DA83C359AD73E942602E5032", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290324, "uuid": "d517bf13-4731-4df5-b134-8f9b181c52cb", "value": "768:r+WtjNuFWGttXEsLk+sd6bVHUzFkZsMWfd/0A6SDZkqAI:r+csttXEsY+sdWVHUyZ3WV/0A6OZk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771290324, "uuid": "d160418d-4774-4c2f-9908-96dc34b63e5f", "value": 49756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290324, "uuid": "95ea32c5-cd3f-41bc-8e1f-b56d2d07ec7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "216ea6f8-0b9d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771290492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290492, "uuid": "77bba83f-566e-453b-9d4c-f5223c910745", "comment": "Malware payload", "value": "70a7458cb1b8b2e7f95db4dbd251bd7a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290492, "uuid": "9fcfe1ec-d64a-4da2-9427-9d2c2765ba51", "comment": "Malware payload", "value": "f86caf21ad3c6c20d22eaea8e310922793ca344dbde8aedcfa6d6d95caae3547", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290492, "uuid": "1002ea41-1c7f-4873-8b38-69526e5dc70b", "value": "T1648308327589582A210B028FD263336C70FFD8E2D611E5B6F6F922344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290492, "uuid": "304c9f9a-bfe5-4fb5-bde5-5a1cc2f97a23", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbn6WaEVN/:XEKltp9t2SX/yr2pb6WBVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771290492, "uuid": "14dd61c3-e86c-4123-9185-cb20d8ee4fea", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290492, "uuid": "9752a539-f609-46a6-b2c3-8aaeaad7185d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5edf458f-0b9d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771290595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290595, "uuid": "1738ee05-c8bd-4c3f-98a7-71ba9da82b5d", "comment": "Malware payload (Mirai)", "value": "e50e06a664633fa1b167cb31b1c62024", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290595, "uuid": "37e0a17c-8380-4e7f-b446-a87de71a8468", "comment": "Malware payload (Mirai)", "value": "4202cdd823b233ef6f344bdbadddd3092798ea16826a474a6f5422e9ecb316a9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290595, "uuid": "735292a8-b561-4b38-b1f5-6f6e1092fa28", "value": "T11AD47D5277218F64E361D67109F3CB619AA921A20AF284CA937CC6207B5176D3C6FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290595, "uuid": "84011f7c-60aa-49db-b957-4f52ca2bce20", "value": "12288:a0Q0HecQ0xmi9nQdUjrm4hDGZVLU8wgpjyndtU:ThHec9xXFG4hDGZVg8ud+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771290595, "uuid": "793e5806-586c-4ef1-a6cd-27a57ef7ff96", "value": 597928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290595, "uuid": "391f7d95-1bcf-49b3-aa99-3245bdaba71c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b5ce5ee-0b9d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771290616, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290616, "uuid": "81c0b99e-7b8d-48f6-8ca7-9d195c8ce902", "comment": "Malware payload (Mirai)", "value": "1076887565bb0a53f5fd920e9705ec21", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290616, "uuid": "13eff5fd-1d67-47e5-8e92-0d7816624402", "comment": "Malware payload (Mirai)", "value": "ef90d910ddcd5115685c9bb7eb03b066034488d7e19797b803e47482f5518cb0", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290616, "uuid": "50ad39e1-0980-4cf0-a1dd-39bd44fd83d7", "value": "T10DA31956BD428F13C5C221F7F7AE02483B126BBCD5EA3142ED25BFA127864DA0E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290616, "uuid": "5eb2ee45-ee9e-497b-97da-67e2f00e9c6d", "value": "1536:afLHkhm+9/rHo3kF0PE5vRvidZutSVXfpIuv3xTO8msaBPB0gTYQb5rwrTFi4:2mm+WTPEjiG0VXfpI+zmJWXFi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771290616, "uuid": "4255b0a6-1bfa-4aa3-ab74-c66b96029148", "value": 103316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290616, "uuid": "1fbc27b9-bb77-4b29-82c6-75a3651a13c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2838f469-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771290746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290746, "uuid": "381e2ca3-f783-40c2-8d4a-4e8550462e51", "comment": "Malware payload", "value": "3943d932f5293d40b7d543b136f2cf77", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290746, "uuid": "e93ae9a1-f954-4426-8290-9220bea64fa3", "comment": "Malware payload", "value": "7c6018c4e34889888bc00804bbd67ac102bcf3e11f605f1eecabcaaa84ba30ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290746, "uuid": "a355a3ef-e99c-4115-b961-cf864c381b2d", "value": "F653124623AA2A72853149F1E7FDFF89F24A3D588FF66C157C103928B97135D1CC4919", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290746, "uuid": "b7685528-097d-449e-bc27-2c4802ab7f34", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PL:yYI0ARqw1qAEv7UIFM8oJorFquyjg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771290746, "uuid": "65db71f5-01d9-406b-986d-fd6059e8a5e2", "value": 60660, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5f67499-0b9d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771290795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290795, "uuid": "a8107df8-a84b-408e-9060-d4f167e423fc", "comment": "Malware payload (Mirai)", "value": "827fefe4b9f4b568a953e635fe3f651c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290795, "uuid": "24412954-620c-47d6-a9a8-650bbfdc6660", "comment": "Malware payload (Mirai)", "value": "516ac5ca316aaab121bd1786abe5c790e275f84c07191769bd7c49110fde2428", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290795, "uuid": "852912aa-2c4b-4e9c-ac01-7543b153a901", "value": "T16BA4C023F6609ED1C8224AB45CFAE2340705E6A113827681F2FACD553C4F97ABD8E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290795, "uuid": "f9faf017-7261-460b-b86d-1439ebd3b3b8", "value": "12288:lUNO5sobNcEq/s4/qZI2WqQDuTbHDxQpjy7B:NjbCTwYq/vr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771290795, "uuid": "52b0e25e-92fa-43a5-966c-25d5dc7277fe", "value": 463092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290795, "uuid": "afc598a6-2948-4831-9090-a2c37bec407f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3d59f01-0b9d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771290818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290818, "uuid": "abeb7839-a434-4495-b9f5-71fd659bcf30", "comment": "Malware payload (Mirai)", "value": "fc49baf77bec8876df0155f5b51badbc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290818, "uuid": "700d6792-722a-4db2-b2e0-e2428acd5dfb", "comment": "Malware payload (Mirai)", "value": "33048b7f4686cb317be9e97d71955bacd9a175f36a2c1566bce9f088e425f6e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290818, "uuid": "b1d83cb2-3e74-4759-97a1-19fd5f58de31", "value": "T17C234B41761C0E47D2A65BF4693F27E083FEE9A020F4F588260F9B868175E77508AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290818, "uuid": "1c4afc61-66c7-4888-806a-2692148c411d", "value": "768:ADwEd/2X/wnjv3E9TbSvusR0ws4hY5yuxK8WZ8oqr5CCr0GSvtFABU0s5m7qEZ:jvwUbSvLXY5yuxfKQPg8fss7D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771290818, "uuid": "9c9d78f5-9cc9-4b39-9172-93c1dc730a8a", "value": 50092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290818, "uuid": "0f9844ec-4135-4a27-a294-2ab7779d44b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13b472e5-0b9e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771290898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290898, "uuid": "729443ce-2fac-4b69-8746-5e7ae1ceaa42", "comment": "Malware payload (Mirai)", "value": "65d92886c73097dcd1493f6ce3f78ca7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290898, "uuid": "bce791a2-d705-4b7b-b58e-07449c35ab82", "comment": "Malware payload (Mirai)", "value": "bd8edef9bdcb0919e6c219e97f645cb6201ca7f58d8bb43c76e17b0c0f6fe70a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290898, "uuid": "8a5edff5-2425-4a6e-b5b6-e8155fdea56e", "value": "T1D884D08AF7562D82C9EBC5340886C645575AE19723F3834A3B476A7B3C193B78F2C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290898, "uuid": "c82f81be-2356-4ad7-8179-968ea733117e", "value": "6144:c5e9gio4ixnOlO152n000uv03PWw/kjXpG1WmDgpjmnN:oeujtZOlUYI/OXpG1bgpjmnN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771290898, "uuid": "15826877-9ebc-4286-81c6-5937a7bdb674", "value": 382036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290898, "uuid": "a8097fac-bc57-4fbd-9fee-5271bd450648", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5338f74d-0b9e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771291005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291005, "uuid": "db830ae1-411c-4b4f-bf71-0a7219581f49", "comment": "Malware payload (Mirai)", "value": "672c7ad8f580a2dbd9481d449b67daad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291005, "uuid": "e8dc7982-b322-4c7a-9d13-4c18537fb786", "comment": "Malware payload (Mirai)", "value": "36c4dc3b4efbfb9881f777101f6b6c9718310be0721ab9bf47a505b18a1f708e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291005, "uuid": "70e3e819-bcbe-4a46-9794-95c020995219", "value": "T10284E09BF7562D82C5E7C63504868644571AE19B23F3C34A7A071A7B3C2A3B68F3D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291005, "uuid": "6bd13890-2be2-41ac-9fc2-76130ab61040", "value": "6144:pL5f9F0dOtBfm/UmolLxLT7iv61jWRftIoKDWgpjmMO:Xf9F0YZm/1kTZxGftIozgpjmMO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771291005, "uuid": "3a3349a0-e98b-4733-a9c8-106544c929d5", "value": 377940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291005, "uuid": "fcc9df20-4bdc-4257-b0b8-3cb4c1435a53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "559676fc-0b9e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771291009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291009, "uuid": "3e5d6cb5-38cf-4edc-86c9-0fc687e07973", "comment": "Malware payload (Mirai)", "value": "2441a1ddba7803ce5d028685e57286f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291009, "uuid": "ea74f145-6104-458e-8edb-3e1c6e3548c3", "comment": "Malware payload (Mirai)", "value": "511bb4e107503f30756a68761440513e1c2683f5cf065b0ad2f4242a30242462", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291009, "uuid": "eab40d97-a03b-4455-876c-d573909427c9", "value": "T184436A02331C0A47E1525FF4393F27E083EEE9A121F4F589664FDA464276E37158AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291009, "uuid": "c1d47455-885d-4950-a8c1-e8d7283d1b2a", "value": "768:set1QnQmyYvb2qbR0ZCRf1lwPl7F2mWbqbsSYLCuNyT6Z3rY3TfRt5AIs4shJpu5:sDySbR046PRFxeSSzq6Z3rIpTsPpw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771291009, "uuid": "23c7d0bc-d7d5-4ca4-bef1-dc75e7282a94", "value": 58284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291009, "uuid": "19538959-92a8-4eb3-ae20-053716b01ecc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76378fde-0b9e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771291064, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291064, "uuid": "b83900ab-108e-4f6e-bbf9-d7b11942e8c9", "comment": "Malware payload (Mirai)", "value": "a5b9355474856489517743cf473ca413", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291064, "uuid": "55abdda5-822d-409b-ac3f-3d36dc968919", "comment": "Malware payload (Mirai)", "value": "7e39aeb20a38ec892ee72276c05bd40a342cd3ed14a8422454f58b4cd228d5ad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291064, "uuid": "9184f726-f282-4973-b71c-1c235e19c617", "value": "T150D47D5277218F64E361D57105F38BA19AB521A30AF395C2A37CC6207A50B7D2C6FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291064, "uuid": "a82e0abc-ca02-46fc-b177-28f5a67ee280", "value": "12288:Fca48X/o0XiMaNdiXJx4cBGm3zAJmgpjytsQj:S8PA04cBGm3sJSsO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771291064, "uuid": "1d86e2c6-0d74-4d5c-aeb4-6d692874cf03", "value": 597936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291064, "uuid": "5be46d6d-c02c-491f-9b63-bfc3df0987b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4686b6f5-0b9f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771291413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291413, "uuid": "d0e6101a-effd-4a40-a3ef-c3657401683d", "comment": "Malware payload (Mirai)", "value": "aaeff1b096a170d819f45f7bbbb160c9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291413, "uuid": "f2e27d21-780b-40a6-8196-7cb830725a94", "comment": "Malware payload (Mirai)", "value": "da6b8a75f377000287e1fad7d0b7073cb1dd88b6b75d0239d4a14a800bc557b7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291413, "uuid": "6fedc4cb-0651-42c0-85fb-12e2201bbb7a", "value": "T1BCD3980A7F228F6EF669877443F74E31975837D61AE1D684E1ACE5441F202CE241FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291413, "uuid": "661c8ba8-3a73-4b69-a75c-b84efe4a5de4", "value": "3072:J+Fa0R2VJ3VInbaDUnr91Xt5NmpsCmczCcc/wtiq:J+FnRadSnRjVtCGcptiq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771291413, "uuid": "4864cf4c-3ddf-4ad3-8434-deacb435b823", "value": 132880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291413, "uuid": "44a8f872-4904-41a8-bef4-a9280eb3ad40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "789d5096-0b9f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771291497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291497, "uuid": "152a3b5e-06e7-4bca-81ff-eb2ab87d2801", "comment": "Malware payload (Mirai)", "value": "7450e2509adf42b09062d76f55bb9b0d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291497, "uuid": "e89bf88d-ebac-4db9-a0a9-8aa0cf603e89", "comment": "Malware payload (Mirai)", "value": "e83aa20d812529230f38755d969081382df5b62aeacf832666f163dfc919cd0b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291497, "uuid": "883f4d58-0492-44dd-a575-53eddb38b2be", "value": "T15DA4C063F2705ED1C83346B45CFAE2340709E2A213823A51E6FA8D553C4F979BE8E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291497, "uuid": "4b780ddc-9222-4137-9231-a93200a7b475", "value": "12288:9woqscdx2FZdrEQN22+pboWyT+NqQpjyX7:9Ba6lhWp06a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771291497, "uuid": "b987834a-825f-4eed-b2b2-3e98d4291092", "value": 463092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291497, "uuid": "1f516aef-9b0e-4520-a25d-8800e5824048", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9ce7468-0b9f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771291607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291607, "uuid": "cda26175-4c51-4c00-a629-fb136067431e", "comment": "Malware payload (Mirai)", "value": "ed1ef9543490233c6da46eecf451dcdc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291607, "uuid": "65ba8137-d950-4c86-9430-907c8f38f47f", "comment": "Malware payload (Mirai)", "value": "08b2b3e74a0a2b11ddf2bd51ebb460f4e91dca14ad6c53f1ca3ceb71509c855c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291607, "uuid": "890c6633-4aa9-42fb-b877-6ef7017abaa2", "value": "T15DB31A46B9919F12C4D621BAFF9F418933136FB8E3EA3102C9206F94378699B0F775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291607, "uuid": "94f0d9e6-e7ae-4b52-988a-61d44658974f", "value": "3072:/PXeO7glDkyMIOBaU16OMdpuzhbxB1jgInzsla:3eO1yMZBaU16OMdpMhdrsla", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771291607, "uuid": "1a68653b-012a-4d4d-a842-c51c40c446d9", "value": 109344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291607, "uuid": "ded1e187-5755-4144-970d-aad2d8da9ad6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dedb31f7-0b9f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771291669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291669, "uuid": "36e032a1-3f16-41d7-948d-a2aa6f67e471", "comment": "Malware payload (Mirai)", "value": "95145cb3f6d28855a146d7fffffc57f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291669, "uuid": "3c99518a-8c1b-43c9-b0ce-2f1b31d522d1", "comment": "Malware payload (Mirai)", "value": "e85e14a1741ab511674de8ff7821ea7dbfdc2e4bfc007cc3aaad31b609a1c63d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291669, "uuid": "4464e249-a14f-4591-93f2-15a756b780f5", "value": "T155D3D706AF610FB7DC6BDD7706F90B0235CCA85B25A43B757534E828B60A1CB59E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291669, "uuid": "5800c501-13a5-41e7-aab1-dd92eb30f9eb", "value": "1536:kPEmUFbJ4a20Zfkv1HizhmJ0oNkGOrIzWROjJ5I6S1murbdc0+eZlHBW73RcLnJO:46AwByoQpkGOtB1mz0+ev9EZF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771291669, "uuid": "3a5684c8-4bbf-466a-b9e7-e2992a90a28d", "value": 136016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291669, "uuid": "e3a72ab5-b586-4cef-886d-8a23a88bdfb5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fad48f4-0ba0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771291992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291992, "uuid": "4ed76a9c-eac6-4176-a1e2-7ba04a5561e1", "comment": "Malware payload (Mirai)", "value": "fcd7e7d21bc4ea521ea149cbb0dda9fd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291992, "uuid": "5f598b2e-944a-4449-95c7-abc3b986a27f", "comment": "Malware payload (Mirai)", "value": "a51bd7639f0e30a76d7207e9ac14cf746b3e004f27a0347bf324000de97a291d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291992, "uuid": "60eec49d-7271-4e3c-a38d-1026282900f5", "value": "T139533A22A9792E17C0D5F57B21F38324B2F56B0E24A8CB2D7D720E8EFF1855065472", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291992, "uuid": "cf8de6d7-99ff-4219-bdb5-af566ad26383", "value": "768:cnol7i1qTSCq9r7Cw7p1oY8dwJONpn+d9E5mp5MiSKuSGO+h9s9F40:cnEiwGCSr7CSpiY8dwJwpn+d9x3EhE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771291992, "uuid": "8badfdba-1958-4c3f-8241-416def64895b", "value": 62484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291992, "uuid": "35023dd1-9c48-4088-a072-6c0f32618f42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c6e3f5-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771292186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771292186, "uuid": "e33efc0a-5a35-4841-9f57-940d7364328e", "comment": "Malware payload", "value": "3b973286b5d06e8920aa3578a4941be1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771292186, "uuid": "5b6d2757-3477-41e5-9ee4-8db1dcd0cf2b", "comment": "Malware payload", "value": "d4b125064e284d4586ccbe058f214c34ae4a973a3f276f7db1a1b1da0e9f97b6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292186, "uuid": "76b42abb-5ba0-4d78-9ed5-5bfdfb325f5d", "value": "9A33024523A62EB6C57548F1A3F8FF89B14A3EA49FF55C0A7C207658A43236C28C4C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292186, "uuid": "066ecc65-e04d-43f0-be40-5102638a8dce", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EO:yYI0ARqw1qAEv7UIFM8oJorFquj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771292186, "uuid": "57470b11-a12d-4e27-b625-adc535474be9", "value": 53576, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6e720e8-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771292240, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771292240, "uuid": "2dddcc48-e59f-45b0-8cf7-2072ed9b12ce", "comment": "Malware payload (CoinMiner)", "value": "a20727b81b50a20483ba59ae65443dfe", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771292240, "uuid": "a3d3af5f-b57a-4833-95c0-255c3d3cde38", "comment": "Malware payload (CoinMiner)", "value": "af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4c", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "i-frame", "colour": "#eaf934", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292240, "uuid": "8c66cf80-40f8-431f-b50e-a5f49d0d78d5", "value": "T167563362F440E436E038203925F684A6B17DFD7347254A8B73A93A364D793D836BDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292240, "uuid": "d14c6845-e749-4249-a4e7-ca55386640d2", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292240, "uuid": "808749a8-ba8d-4614-bc3a-ec08dd2c3b93", "value": "98304:RLGSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+Y2naq8le+:YBfTCiUswVSLOJgyBG/aW+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771292240, "uuid": "21797739-7d66-473e-b1ea-a6078bb75324", "value": 6271259, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292240, "uuid": "2500f5e4-d41e-4f75-981b-d3745e5b4702", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5869756-0ba1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771292512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771292512, "uuid": "9e66b49c-b7a0-4181-a398-fb0abf647024", "comment": "Malware payload (Mirai)", "value": "a89b112bb76495bd420ab1d61bbe1259", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771292512, "uuid": "11cbc705-4864-45f2-bdae-4a0bfbaf333c", "comment": "Malware payload (Mirai)", "value": "df4c2eb8060177be7bc2b5cdf9a26cc794a316e8708f53d4262ba08cb36a1a5b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292512, "uuid": "f196dd0e-4313-4585-96d0-36847c49078d", "value": "T13A157B8DE786E0F1F22344F0025EDBF61934A12A5013FAF6EF45266774727A16F1A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292512, "uuid": "c891e1c8-747d-4a47-9839-89e19821bfdf", "value": "12288:7HJVFD4uIhpjhwQcgpCRCVbjDIF6ckOZjFvJ3mKGPyI/cCepAzFLu:bJVFE9hpjhDpQCNk4tOZfmTxe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771292512, "uuid": "2b5c4149-8523-4fd9-b682-6db83b0025c6", "value": 878808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292512, "uuid": "9ca3ac12-924c-42c0-85de-8cac17483953", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2a156d0-0ba1-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771292534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771292534, "uuid": "059a47cd-11b9-4aac-8946-18c4a2260059", "comment": "Malware payload (Mirai)", "value": "00d3c4639a64d1b1d48ab5701f3e9ae6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771292534, "uuid": "c1791b92-2868-4f0a-9db5-812a07db1cfb", "comment": "Malware payload (Mirai)", "value": "842a05a0764d67bf2cfd38162aae52a2566528269e1b9f7fbab69d2dcb467d35", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292534, "uuid": "05bae3a6-7ed7-475a-beea-e14c3ced70cb", "value": "T195045B47EEC90EDFC457CEF046BF836B19E35AAB8CD1A1F5447C8C0C795918A86A36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292534, "uuid": "ca53c392-a32a-49fb-b718-db410b73ba39", "value": "3072:B94IQupD2xaSIAAjwdqQ3FkhvOwMu7lKn6aS6irtynfbsmW6Qqu6:/4IQ+CXH65lKn6aVirUgmW6Qq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771292534, "uuid": "69527ba6-f0da-4aac-9b92-933bda2ea58b", "value": 184964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292534, "uuid": "b0d1ddfa-a31b-4324-b934-e1ccafa809d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9a21752-0ba2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771292922, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771292922, "uuid": "ae6d2192-dc91-47fb-b20c-769022fcacb5", "comment": "Malware payload (Mirai)", "value": "76b6500212542c3a2f41e6420605f174", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771292922, "uuid": "76df29fe-78f1-4042-8cd0-353b1666b08d", "comment": "Malware payload (Mirai)", "value": "d99b7e2a66f9e9358b8355478f423670a9d383c6c431979758eb7c0a0d53c083", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292922, "uuid": "675965c4-696b-45f3-9f93-a6ca3cc8fa11", "value": "T169B43A55F8809FA1C6C12976F64D86AC33134779C3EB72069A245B343BEB86B0F3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292922, "uuid": "2fb1cf85-b950-460b-b2b0-8363a497a1d4", "value": "12288:xbQV6S86XxBO265zdyZhU5KnaB4XNIN+P4gpjrMn:xboZ56FdwhU5KnTqF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771292922, "uuid": "6adb4e96-4c3a-4b6d-a380-b1d400a85fe1", "value": 516976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292922, "uuid": "9d391946-1ee5-49a2-9f53-7a30564bcad1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04684051-0ba3-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771293020, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771293020, "uuid": "065f4c75-fc08-4eb3-b2d5-069e2219fbe0", "comment": "Malware payload (Mirai)", "value": "b9b6c52ad1194eebffd83bfc2e36d7a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771293020, "uuid": "0c04d7b2-c387-42e9-b497-34a956d5dec1", "comment": "Malware payload (Mirai)", "value": "c398b45e5f6d4905ba4da1b7b89dc17063c11951d2fdd4749d7f59971f447295", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771293020, "uuid": "7adcbd7b-4100-453b-b21f-9b347df9ca84", "value": "T14C73930ABF650FF7E86FDC3789E91B45248D641A21993B7A7D34D818B24B24F49E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771293020, "uuid": "89a11e72-ef93-41b9-be20-c405a29266ff", "value": "1536:502Vu+dSmTBJRc4gRGUUp7gpsDuPSwteQHBz:57Vu+dS4BLgRGlpaeg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771293020, "uuid": "479b7ecf-a1cc-49d7-bb11-1a2e15be19b2", "value": 79868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771293020, "uuid": "b19431c7-5ec6-4be4-931c-12c4f77f4c8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "101366b3-0ba4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771293469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771293469, "uuid": "8d74a372-af92-41f6-b955-db549cf98c38", "comment": "Malware payload (Mirai)", "value": "813f2bf4069f3bdd1b5d665d3be83ee5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771293469, "uuid": "07dc69f6-60ea-429d-8f9a-a6048f38acd2", "comment": "Malware payload (Mirai)", "value": "3c1b4008dbad8a03e6a5e1d273023a6b117e97f51e72b2e8da8f89143f1b1cae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771293469, "uuid": "24bab473-3883-4e3a-ae33-b8bf9eeb0f89", "value": "T177434DD6B800DE7CF947EB7A80164A09FA35722154A30F27A267FD93AC721564C2FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771293469, "uuid": "f1bb12d6-d110-4435-946d-ea86948ed7c0", "value": "1536:bqgor9Y1asetA1PcG5eYzCktnSygjVWstg8e:JGssA1Te8LJuWqk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771293469, "uuid": "68097fad-532d-4b36-b513-63dd803325cf", "value": 59716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771293469, "uuid": "e866f119-fe6b-4f3d-995f-072cb12027ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f29ec12-0ba4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771293495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771293495, "uuid": "12b48463-97a5-498b-a2a3-73bd18cb809a", "comment": "Malware payload (Mirai)", "value": "f995c1b477a1997583782944595b9057", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771293495, "uuid": "78c98714-9841-4aa6-a8e2-a47d77ed7575", "comment": "Malware payload (Mirai)", "value": "e283d55c72e351b0c4c50a2eaafe4b6e1d26cd5a2d8c097ffcb184f5bcd50157", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771293495, "uuid": "06bf7ff2-23c9-41a9-934c-ae0aeffd0cab", "value": "T1CEB44B55F8809FA2C6C12976F64D46AC33174779C3EBB2068A245B343BE786B0F3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771293495, "uuid": "9a670785-db9c-4bde-be08-f4c54defd27a", "value": "12288:HEDOoh1MT0/jhwBoGtbGIODcKYgFXgpjrft:HEKr0LhEoGtF99", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771293495, "uuid": "406fcd6d-d288-4108-be7b-7e6fe2675d1d", "value": 512880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771293495, "uuid": "0d787177-589c-47c2-8a08-379431c3e01e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b88715aa-0ba4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771293752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771293752, "uuid": "af8eaccb-1021-402a-9840-4b3476061da0", "comment": "Malware payload (Mirai)", "value": "050cac48e4de6ed5e8c2bd98f4785602", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771293752, "uuid": "b076f015-c7fb-467d-9922-495baf45f29f", "comment": "Malware payload (Mirai)", "value": "16da55424a1e4f28a06802aad9ce237c6e94f1ee04564a35a86b6eb0311c790c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771293752, "uuid": "ffb9d96f-9e6d-4f80-bd61-41b9c34e1861", "value": "T126639209BF611FF7EC6FDC374AE92B4525DD641A21A83B397930D818F24A24B19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771293752, "uuid": "c0e53801-a23a-4862-8636-7f40fefe1884", "value": "768:zlDScD5GY2ne8i2Sxt9yYExR15It45PTemle5Re5brvuX5XiANe1j9WE:zlDSC5G9eb249FKw4Zfl8RWb7Sq1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771293752, "uuid": "f5b43ccd-a3d1-470f-a904-7984b1febb72", "value": 71568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771293752, "uuid": "1e0348c4-7a34-4597-9587-bf63dea0f935", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f6ca8b4-0ba5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771294059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771294059, "uuid": "0583cbdf-c536-45dc-8a85-164344bca6e7", "comment": "Malware payload (Mirai)", "value": "5613fab6bc8f0ebda78d17ee140d7094", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771294059, "uuid": "9b67a92f-92ae-438a-a8c8-4018b4cac004", "comment": "Malware payload (Mirai)", "value": "fcdf77f47125f0adf017b62b65b7a785c0964371e3c4ce899c18fd8f22630da3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771294059, "uuid": "c260700b-ff89-478a-86b5-81a20e2f598b", "value": "T145056C1BB2B374BDC457C03443EBDAB2A935B43902226E7B65C4D6303E56E701B1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771294059, "uuid": "635b67ae-7740-4dd7-a1b8-15d91058f5ea", "value": "12288:bKrOdqh+V94s50D/lkaNRengkwvBduv9foatqH9kOe03wq55dzuFmEJykUnqofb3:wOQK4sakaNYMpduFfoat1A3bbq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771294059, "uuid": "2a6eb63d-ce07-4e28-9534-a0cf11274aae", "value": 850728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771294059, "uuid": "c799cb4a-7505-427d-9c6d-c8fcc540da8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b83b4d58-0ba0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771294087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771294087, "uuid": "49707282-eb02-4ed3-9c28-e3ca4d525d9e", "comment": "Malware payload (Mirai)", "value": "f00e3e3516e5907679a5f631d9301b62", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771294087, "uuid": "6eb016ae-dd5e-4282-86e1-7ffbeb7e3c21", "comment": "Malware payload (Mirai)", "value": "3f8b336a91bbd34ea39e692a9f782466f4ee91a445455d6ec77d5cbdbbe3f44c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771294087, "uuid": "f6fe699d-4026-4aca-800b-c2c9758f58b3", "value": "T18CA31902B70D0F43D1632DF02B7B1BE1979AFDA119F4A580A51EFAC69271DF22142E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771294087, "uuid": "fc7798d1-1485-4485-901b-384e8093cbbf", "value": "1536:Zz2zw5g0WAnfK0Mc0Uq2QSuZMVkw2ZvlYUyodkJbeZ04sw8fv3hgpF1yJp5VxP:ZzQogP02KVktEZB54shf6+P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771294087, "uuid": "021f5059-51bd-44c6-99a6-27ace2929ebb", "value": 103612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771294087, "uuid": "ab2f2929-b59e-4155-9853-22b4cdf8e28b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "507cb09c-0ba7-11f1-8369-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1771294866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771294866, "uuid": "fea93384-1b19-4bb8-add4-d9f621cbee57", "comment": "Malware payload (SantaStealer)", "value": "e63171634c92f0170eb5bd64bd2e44b6", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771294866, "uuid": "d298020e-1b93-4a11-90e6-7d887e844c46", "comment": "Malware payload (SantaStealer)", "value": "d3fb6919ce5b708d7e4f50e49050d5c497f658f89951418c4f590d9476764271", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771294866, "uuid": "191bc491-761f-46dd-aad4-36ea38c04057", "value": "T1AA1633B44C836A32D264C031D1A559B7C673906E1EEC6E7C27E0ED192F533E2936DD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771294866, "uuid": "5fdb1746-f73f-4810-8d1d-938490e2fddf", "value": "459038dd913bd7fa2746dd2acf101131", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771294866, "uuid": "f32864d5-c35e-47e2-8557-f675e3c5646c", "value": "98304:1cJsFhY3bgEkgZObJH2bwQ9Pb9feOGRRU7/Kat8N0:1cJ3PZObYbv9Pb9feOGI7/KQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771294866, "uuid": "35bb5b22-a17d-42eb-aff9-fdd6e9d1994a", "value": 4101632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771294866, "uuid": "9812b589-8054-4ce9-bdac-ef46f1309d4f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1546e47-0bad-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1771297686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771297686, "uuid": "ff4ffc82-3f08-4029-9432-e827c110ee4e", "comment": "Malware payload (Vidar)", "value": "e0b3fcffe7cf02b37c21271117ee0ebe", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771297686, "uuid": "25ac66a5-566d-4069-842c-1702aef8b0e8", "comment": "Malware payload (Vidar)", "value": "49f0a3af3da1679c3bfd01579ee35e273e3907ed51486889d8dfe41e86301df7", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771297686, "uuid": "0c6ebb6f-f77b-43be-a817-65980dfca7da", "value": "T193C54A52BC90A861D5DAE036943191A177347C490B3377C3AE62FABA1D3BBC41EF63", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771297686, "uuid": "e81cb1c1-16e1-473d-855a-998a36b7e2f2", "value": "9cbefe68f395e67356e2a5d8d1b285c0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771297686, "uuid": "1b0eb137-2feb-41c5-9af5-1fb95eebec31", "value": "49152:shFo3My5owOUscTUWdBKZSAxyVaLkDajP0+5n2gJFX6K1:rMy5owOU7TUsBKZSAxyVaLkOH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771297686, "uuid": "9366cef3-f35d-4b85-a3cc-b66d9cec2e30", "value": 2678272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771297686, "uuid": "01c4ff6a-4752-4bab-9f0b-c70c207baace", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771300147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771300147, "uuid": "7647b99f-461a-4d17-a0d1-e7ab4577005d", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771300147, "uuid": "450d00ec-8340-4b1c-9c62-4c5b089e4c67", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771300147, "uuid": "19e6f5e0-dc56-4cb1-b90e-279af449a34a", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771300147, "uuid": "219fac68-c06a-47ee-bdb2-20dda27398ec", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771300147, "uuid": "70476027-ff2d-47fa-82db-611e9241458c", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771306392, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771306392, "uuid": "f21c75c5-355f-4729-8777-44215e2a1c28", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771306392, "uuid": "61e2aa8f-3bbf-4473-957f-0f5a99502650", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771306392, "uuid": "06eeab0b-e7d8-43ee-919f-ba6d5d7f488e", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771306392, "uuid": "e12902e3-4897-4c01-80e3-5df6d9fbaa80", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771306392, "uuid": "04a13fb1-1f6f-490d-b958-a832b0d13dc9", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96f680d9-0bc7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771308728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308728, "uuid": "ada5bc8b-1df9-4a59-99b4-2045c87f2429", "comment": "Malware payload (Mirai)", "value": "19dcc357724e3748a3c05740c7aecd22", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308728, "uuid": "8544509b-1025-456b-9f98-c27e2df0d2e5", "comment": "Malware payload (Mirai)", "value": "fadd00c0b672f91e751fdcbdb3457333dd5879ab7cfa9f187e3bfc7c65894aa8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308728, "uuid": "52da81d6-f277-440c-b657-7fb2648f1160", "value": "T1A6334A21F9790A27C0D4B1BA12FB832AB1F6479F50A8C74D7D320E8EFF1499059A75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308728, "uuid": "90507956-f883-4ddd-bdb1-ed9136f101c6", "value": "768:GVoh3lDBFm6t+deWU3xwIZotohqJvM+AEMO+VziNxd:GVItBF4de33xwIZotYXVWd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771308728, "uuid": "ad5ca643-118c-436e-8f91-f5dbbb72ca3f", "value": 54184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308728, "uuid": "aeb2cc11-0a19-4e53-a9a3-d4c7372b1688", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98bc4863-0bc7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771308731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308731, "uuid": "4ecce1bf-9bd1-4f22-bf18-3a895b3d6731", "comment": "Malware payload (Mirai)", "value": "6b6a28c8828b1eb6ce3adeadeab30800", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308731, "uuid": "1a36c9ef-fe52-4897-8da4-0377ec0b80b0", "comment": "Malware payload (Mirai)", "value": "8b4fe3b1ca07a3fbfc7d0ba233b6cdcefa2528699e06687dfc4dae8db66418e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308731, "uuid": "1616860d-2fbd-4168-977c-7fbe98a4060c", "value": "T1CE332AD6B5029DBCF95BEBBA8413460AF531B7561083063763BBFC53AC361A44E23D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308731, "uuid": "d45dfeba-19ba-427f-9dea-d0591ef6fa81", "value": "1536:qN477eh2D9fV7HgEgc8eh1gBUxCWQ1v7d:qU9fFHgxGu5W+J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771308731, "uuid": "41da01f9-a368-45fd-bcc7-929e0bb74a48", "value": 53024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308731, "uuid": "8839f535-cb8d-4827-9482-72804c3d372e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98bdc859-0bc7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771308731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308731, "uuid": "4cd0f0e6-1b4e-45cd-b72b-c77ee93b8d90", "comment": "Malware payload (Mirai)", "value": "52b86ba20ae1c888f0dde190e111a02a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308731, "uuid": "24eed6c8-af23-482f-bf03-5139d53fb412", "comment": "Malware payload (Mirai)", "value": "868bf0eefaf419a4e549a93125db2e30b82b5c79a670fdd91f223e69647093eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308731, "uuid": "21d96ecd-e0ca-4bb5-8af0-16082d399195", "value": "T18423F159EA1968A8C8341AB4D5D059F96FA90A44F0FE34A3B35C5F1CFF8250AB87F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308731, "uuid": "bff355ed-2cd8-4be7-a4aa-fb9ac4ca3a9c", "value": "768:axx1HZLnpYPxQvazkSrOW9zRy2dSiZ4+9q3UELbod58P2xa73kYePLd:axxhYiaYiOWBs2dnmjLbod54QmeR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771308731, "uuid": "f10bb26d-6892-410a-8108-830c16b2bde2", "value": 49220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308731, "uuid": "4578b36f-0187-4013-9ff8-052ae18ad33a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98c013f6-0bc7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771308731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308731, "uuid": "9fac3e61-3146-42d4-b0e5-f39dc4f2f84d", "comment": "Malware payload (Mirai)", "value": "0ae407ade22776e2aad747a0906e4363", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308731, "uuid": "9dadbf41-daca-4e99-8a4a-692600548750", "comment": "Malware payload (Mirai)", "value": "a142ecb42ebb35c6525adfc0c382910ffbc6ce115f756b5be86c4b2621d85c89", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308731, "uuid": "27e459c3-8e23-4f75-9ecf-16908806a41f", "value": "T1A0B2F132C24C81A6E804807F73DE04FC9554DC8C5AECEB04F3855EAAC6DF72769689", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308731, "uuid": "946cf492-9a36-4441-8eb5-7d908fce51ba", "value": "384:Mo7/nrMpDElILLu8xiaEjjzr0FK+0KNa80HvEz/Im6euZoP7WEbMZQc/G9v1Rs:b/rMGlIPPmjjQK+0KU80MjTvuueXks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771308731, "uuid": "66909a7a-6670-4b6b-8bc9-19900d0736f5", "value": 24184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308731, "uuid": "09ad3554-7096-4602-b867-214f224cd6a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f52ff78-0bc7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771308742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308742, "uuid": "e8670721-4f5a-4d71-b647-c5a005989fa1", "comment": "Malware payload (Mirai)", "value": "f124cfde8335928b9e92f89177c1453f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308742, "uuid": "250be4f8-5b50-462a-bd62-ce0a7122aa98", "comment": "Malware payload (Mirai)", "value": "0bf9646f78d4874184ff685581648a2984021bbd85ef9718cf5424ae3c255120", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308742, "uuid": "7077b061-ca7d-45b0-9e9c-9b897cad8828", "value": "T17DD2E0219AB96D61CF803475DA180897F21505BDF2F22A770A6885AD3FA351337FE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308742, "uuid": "180c1201-976e-4f29-8d55-7b28d429ade0", "value": "768:9QHcNMk+FPgVr1fPkvSon88U/VIIK8dU5nD7WG9q3UELElK:9QcjhPq5CpKOWELJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771308742, "uuid": "5a1bb75f-22b5-4203-b0cc-b58fd678a622", "value": 29900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308742, "uuid": "ff2499e4-3780-465f-97aa-b365729ab0e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a519efaf-0bc7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771308752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308752, "uuid": "20201ad6-8f01-47da-a77b-73166b51d8b5", "comment": "Malware payload (Mirai)", "value": "b7bb9c2329806e913b5b85b600f1c880", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308752, "uuid": "a28709d3-a508-4d8a-bd8e-33616e6f9890", "comment": "Malware payload (Mirai)", "value": "35d3c267340249ad9b727e5d09ca82999c1676f16ea3408eb7458760f75e3153", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308752, "uuid": "92b8b03a-51aa-48e7-8796-97849829fd9e", "value": "T152C2E058CE262072F06E8178B50786DAB8FBB26D7608AB163540A89F36CBC6419F45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308752, "uuid": "a339b7f8-617d-42a5-b5d1-616bdaec6136", "value": "768:+gLCdFkuASsA0IBHoYFkFLN7vIxdgjelHje3uOs0WjssA4:Rec3AhBILLNcxaoHjeHsZjxn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771308752, "uuid": "177e66bf-ef60-4b17-9f35-ed4be4522f08", "value": 25820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308752, "uuid": "ae6fe238-130a-4d7e-a2ab-502cab8a2a10", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a51bba6f-0bc7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771308752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308752, "uuid": "a88e063c-76b9-4a40-82f5-191d198dfdb4", "comment": "Malware payload (Mirai)", "value": "e6db358b3a2425c39716d578c9ff536e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308752, "uuid": "ee8b9489-31b8-4ab6-ae8f-8b3c4358cc15", "comment": "Malware payload (Mirai)", "value": "c63f8b81f0b95f5f88edb6073f725d3ef16fb1140755dc52f4f29eda21c1b5d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308752, "uuid": "63cb0abd-c74f-4971-8b9a-9a6ae68bc569", "value": "T17992E0A6144898B1D231493E6E74C2D3AE6F1779C09E342109D941B9FBE21432EFE2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308752, "uuid": "c7162616-b274-48f2-aec9-bb4e5df2ef59", "value": "384:zoMoni/wBPt7fCJZ0Sy/GoGguVJ+zM8T0sfT63XK96hymdGUop5h7tl:YngW6JaSyOJg7T0xs3Uoz9L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771308752, "uuid": "b1020d9d-5147-4ded-93d0-1a75422dd26e", "value": 21216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308752, "uuid": "cc05469b-433b-4c29-84b3-798984095eca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a51ebe8a-0bc7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771308752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308752, "uuid": "fe3e4c4b-cb41-4e9d-b85c-d67294faa30b", "comment": "Malware payload (Mirai)", "value": "8110b08951c8cc8123c2a41232d4345d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308752, "uuid": "89ec1a93-0b12-4ff7-beef-de039444c6b7", "comment": "Malware payload (Mirai)", "value": "bbd9cad6607885811d823574f1a5b7421da4cafcdd4e7cf8fd777c2220caf9e4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308752, "uuid": "9cfacd95-a33f-45f0-94d9-bac5705ccdda", "value": "T141C2D03DFA6C3E61C74E9CFE66DC4AE94109F29531C78B8E3711581CAA36E1C34598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308752, "uuid": "49bf07dc-da03-4c6e-a07d-17f4577f0192", "value": "384:F2K0/f3zOfDZqsit+pfqckUt7BLEp8njkd7CQVbObIEL+hxr9ES5NkIu/jRWGVCz:Fe6fdz++NqckUt5EQieE4IELeVSEj2WP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771308752, "uuid": "645bc3b9-e842-4d84-844b-bc372e6ade82", "value": 27568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308752, "uuid": "d13a6c2f-83c0-442e-9e8f-13a03443151c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5f8ed49-0bc7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771308753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308753, "uuid": "10329448-9319-4276-be93-dd2939be6c5b", "comment": "Malware payload (Mirai)", "value": "750c88cbbae89c451f4b2c1b64427f33", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308753, "uuid": "1e42731d-819e-4996-abd5-a44600921641", "comment": "Malware payload (Mirai)", "value": "9b53d916fb47c03913b0eea4d552587fc288e1274ac590c15dd405559e218416", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308753, "uuid": "5f73f101-0e06-423a-9296-be8970a05749", "value": "T1F7B2C0684D8D496AD41A073F83BE0FE918E958D1CEDFDA3B97109FC8B28A41FA5349", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308753, "uuid": "ccad8b3e-3c03-4876-9c88-180c464af21d", "value": "384:MkUDJWU4hrurTgWMUQovQDGEvgzHGKspxwioE9FYIvIfV2XKLPLv1Rh:qgFKyJoQGVzHamO3ikurh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771308753, "uuid": "2b51690e-88c3-4703-b161-cb916900a54f", "value": 25188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308753, "uuid": "75ef92c1-c143-4232-a58b-d13bcb78b594", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5fc6b7f-0bc7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771308753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308753, "uuid": "790099e8-7256-4f7b-a48c-4dfe2ebb05ad", "comment": "Malware payload (Mirai)", "value": "f3ef79e0362da80ee4cf80772289fe9d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308753, "uuid": "25c6b673-a44e-4fee-bf44-3412b2031925", "comment": "Malware payload (Mirai)", "value": "92de3c6fa509863267a3b4234e74d9cc3b919db90df44dbbf9bdee6d83fbbce1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308753, "uuid": "1a712401-0cbc-4b73-8fec-c384a7063d22", "value": "T1A223AE23DC3A5C98D11C08B4B5699F346713F10AC6932DF6660A8AE5E417EDCFA5A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308753, "uuid": "ad838254-7506-4a5a-9ff1-374b1ff21550", "value": "768:9a/P6efjfUxSeocJf+saDzEubu9SI6VC6b+oUuDSXCf+:9a/P3UxSef45EH6V1UlXCf+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771308753, "uuid": "5277db38-954a-4e6d-9e8e-6040a6aafaa1", "value": 47876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308753, "uuid": "4fc5c952-5c24-4d53-9f66-61d62631bc72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a604a6c9-0bc7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771308753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308753, "uuid": "2dd349c6-206c-4460-aaf8-d0391168279e", "comment": "Malware payload (Mirai)", "value": "4108a34c6ab025487a3bc9e18db42a7e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308753, "uuid": "2448717b-4ecf-4ee7-96b8-de76f79f79d4", "comment": "Malware payload (Mirai)", "value": "c1572b0f7e550ad76061af9ed0faac6448ff222d60e83bac7ecd99e7224b64f0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308753, "uuid": "bc935e0b-c9ba-483b-ac94-8a4239160014", "value": "T1A1B2D0A9071DB4B38774AC36E82E939181FB2FB441B37424523096A8FD9340E61BD6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308753, "uuid": "0342aaf8-aa37-4f23-b7a6-e9a4190232b8", "value": "384:NhV1t7qE2VmiU9UvPuNu9qxxtvH4SV3fKMeZyXyxE7SwTIdu/rhymdGUop5hO:zTtMmmvPuA9qrtwEaZyX3S+/rs3Uozw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771308753, "uuid": "47a9d536-821e-4659-9326-6ebe0c27d622", "value": 24736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308753, "uuid": "10fcd9cd-022b-4316-9091-8bef783c4a6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a79a75b8-0bc7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771308756, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308756, "uuid": "56c8aa80-987f-4fcd-84ef-a581ce5e1bb2", "comment": "Malware payload (Mirai)", "value": "bdccbfe12053f82993fcee6dac8dc5a6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308756, "uuid": "0afd52ba-7e60-4b41-9f52-b74d913cccd1", "comment": "Malware payload (Mirai)", "value": "668f74313db46fa980d2080f80f59d10be8f65ed7fcaa80261bac572926a023f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308756, "uuid": "3ef761be-93f4-4dfd-a758-87b3ae0bfda9", "value": "T108C2D0AE0B0254E9C85B41B6BFB80FC03EBA0B634A06DD0B39ADDD16DD4656D64A37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308756, "uuid": "25e19f3c-9dfb-4843-9503-78eb5a6d292f", "value": "768:YXgQBA1GCJIYIrC/+HzjRjpBgBJgGlzDpbuR1JGE:CdAoiT4yKjRjGVJu5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771308756, "uuid": "e34a0f80-b79a-4e81-8bca-3ccca820d917", "value": 26764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308756, "uuid": "94ea0e9c-9e8d-431c-9f75-40f12dc413d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15a65a6a-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771308940, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308940, "uuid": "219d08ca-5490-43e7-aee6-85fab26b2a77", "comment": "Malware payload (Mirai)", "value": "dc47c70a493f63214d9096af2a2cdcdd", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308940, "uuid": "59da2f5f-0e6c-4a90-9916-85b4560d1e8b", "comment": "Malware payload (Mirai)", "value": "88683bda10a8e51d73a72f596a3f05ed6b44aa1a56fc758db66cdc55fdbda4c4", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308940, "uuid": "56bc1d60-a09f-4020-883e-e428ef7dde60", "value": "T1C2833A55BC818A22C6D112B7FB6E42CD371653E8D2EF3207C9255FA5378B82B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308940, "uuid": "41184699-92ad-4781-bf85-70661a1fe90d", "value": "1536:mUjGYM6OnSEr9VzdICfkW9KGH7OsvrulCqMqPr5X1SToBHoPVuqX0TaOkIqm++OJ:mUjGYVOH9BdV7bf6gqrr5FYoBHoPVupE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771308940, "uuid": "91c4af17-40b3-48df-bdaa-3ddb25017a5b", "value": 87364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308940, "uuid": "46be311c-f0fc-4f6d-b2ce-d3bbb6ad1026", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e591cd03-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload (EternalRocks)", "timestamp": 1771309289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309289, "uuid": "73472ff0-1a3f-4cf2-b356-d4183a1e6de4", "comment": "Malware payload (EternalRocks)", "value": "5d75be75aeeef4aeddd08dd1e37b32f4", "object_relation": "md5", "Tag": [ { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309289, "uuid": "4816cac3-14df-43b3-a51a-ee7bf8948476", "comment": "Malware payload (EternalRocks)", "value": "a5a0ac2f88c6a3aec586a26b0ab06a9811542c59b1ef5803bacf49ae71fbd09f", "object_relation": "sha256", "Tag": [ { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309289, "uuid": "461a8910-9cd6-4334-ba64-cbe7b99f9ceb", "value": "T1BB068D13F3C5613ED05B1A3A7937A285583F762079128C579BEC3E8C8F762812E2A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309289, "uuid": "9a432da0-47b7-42c0-a823-0561de838cd6", "value": "dbe43fa03853246a5e7671da21b06fcd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309289, "uuid": "4037f9e8-44cd-47a9-a00a-6f3f9f317332", "value": "49152:Z6RlZSDcbZsSNFZnpZv4sxNhdaodRl+FHKBCQ333NDd7e9NA7kt:Z6RHzbv4sxNhnrlnBx333zAA7kt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771309289, "uuid": "36b4de2b-d293-4582-889a-daa44f5a676c", "value": 3871000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309289, "uuid": "8f226d46-b58c-4f04-a7dc-d93ed920bac8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc02b79f-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771309327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309327, "uuid": "a9c8efb4-d231-484f-b3de-0375ddff425b", "comment": "Malware payload (Mirai)", "value": "43f0c98e1b7aabf75ccfb278714b8ba9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309327, "uuid": "5346ab52-b2e5-4a57-980e-4c349c0583a5", "comment": "Malware payload (Mirai)", "value": "323cf396b87d5f2755d4b8fb3da27174f2ca6ccfad1e55ffbd9cae1e9e457475", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309327, "uuid": "385bfa4b-6ac6-413d-a9d3-ed1fd52bf296", "value": "T16C513AC682E40D382CA36A13E6B7E16C76C9945229FDFFA5D9E4BEF0065EC5039407", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309327, "uuid": "b33c49e5-5cc3-448f-ba50-75bb53eb46c7", "value": "48:ve7t7N7heE6GegczPe0KWeKoUe7K7o7Ueff3be99Re2cgexpVecSOew+CevfTeHg:ve7t7N7heE6GegczPe0KWeKoUe7K7o7M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771309327, "uuid": "76c8a407-69a2-4f4e-a6a2-0c8be2efe31a", "value": 2910, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309327, "uuid": "4d8149c7-7d67-4282-ac6e-d145ae75bd33", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f822424-0bc9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771309440, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309440, "uuid": "7a683265-0b07-4172-9d96-193d33146eed", "comment": "Malware payload (Mirai)", "value": "04294ef934e5e0139d81dd3321dda360", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309440, "uuid": "3d3dd048-28a6-415f-ab02-1c25d82e313d", "comment": "Malware payload (Mirai)", "value": "1aef13d73030381aa47352985a403bb649d93020e2822fa5b7a3230a8f03c9cc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309440, "uuid": "e9d2815e-9890-4f80-810f-bd2eee0ba64e", "value": "T1E4B31A46B9919F12C4D621BAFF9F418933136FB8E3EA3102C9206F94378699B0F775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309440, "uuid": "688472b8-c87f-4505-b7c3-d5e229105455", "value": "3072:/PXeO7g9DkyMIOBaU16OMdpuzhbxB1jgInzsla:3eONyMZBaU16OMdpMhdrsla", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771309440, "uuid": "aa570f8a-56d5-4d14-82d2-d3636eeea801", "value": 109344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309440, "uuid": "e8698006-32b4-4bfb-a621-b511c5ed282e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0df005d-0bc9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771309711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309711, "uuid": "35ee99a7-bae5-45d2-ab74-8c8c590123b5", "comment": "Malware payload (Mirai)", "value": "66bb6e62d6eb34e8a0064265734c0b77", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309711, "uuid": "b5994fe9-3a4c-4987-8958-c813c82a72c4", "comment": "Malware payload (Mirai)", "value": "9eebcd36b43db42e9158f2fa7eba07457494a97b8d1cd110e69cc5c4d9681867", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309711, "uuid": "9b254c86-93b0-4d1e-b2e1-a55921c5cda2", "value": "T1B7B3D91E6E25DFADF369833547B78E31A75833C62AD0C685E26CE6001E6034E245FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309711, "uuid": "b1075934-d51d-4800-aca7-70dc24a6fea2", "value": "1536:oN1qVEsdza07J1OVWCOiHqW9xKOxK4LK3PepoLZg65Lm5b5en9gnzRiQ3:Y1oJza07sOVWDpoLZg6w5bggnzRP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771309711, "uuid": "1fea16d2-ce16-4090-afa4-e2048ec72ff9", "value": 109972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309711, "uuid": "6decdc69-ce80-460e-95ae-68b934a97b5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64720be7-0bca-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771309932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309932, "uuid": "fcba3cf5-0bcb-4661-aef9-12b09769ca69", "comment": "Malware payload", "value": "e15f6acd60afc698e53f6d3c4b8eb0d7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309932, "uuid": "6f53f8b9-ff89-4597-9fd9-6efa433968d5", "comment": "Malware payload", "value": "988ee539f45794723438d9ced124f2097fa935fd38ba806b78eae4c27b797516", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309932, "uuid": "ea8ca255-810e-4cbc-9f41-6aec965fbae1", "value": "T10EC32B7BA7F2303471178719F5C6B72C66AEC177EB020EE2B9B5662D96C22D502732", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309932, "uuid": "dac9aa5c-6137-434f-8b59-ca9cb82068bb", "value": "768:0G5Zdyp3trTClGRNjcXscJGcz74k/tHcBA7Sjv+aFfITmrAP0B+9GJK:08ypdrWl4kuA7Sjv+aJITmrAPqeGJK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771309932, "uuid": "9f333249-eb29-4670-a09c-4ffd12c195f7", "value": 120467, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309932, "uuid": "7ea08cf4-a90f-47c2-b98c-35639ac803cd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8956f7ad-0bcb-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771310423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771310423, "uuid": "602156fd-ed7e-42db-8485-9f37d625a2c6", "comment": "Malware payload (Mirai)", "value": "63dc25df481b0a5077d0d9208fe528cc", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771310423, "uuid": "050677f9-9dc5-4c35-9928-e2cedf0c6ef4", "comment": "Malware payload (Mirai)", "value": "7fbd8b70c4ec11802a8a4e9b857278bf81e4f57ad278f3309a87726f2b79fce6", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771310423, "uuid": "ed57bd6c-b9c5-4e60-ade2-6fefb0432587", "value": "T19D833B95FC818A12C6D112BBFB6E428C772653E8E2DB3203DD245F65378B86B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771310423, "uuid": "10003aaf-947e-41b7-9f6e-0f6500549cad", "value": "1536:ldu1i9RMyGlP7vWRwxrJhbiculCqMpPa52c4lrBsAL83TnO7zN889XiFinzo:ldsQPa7emIRgqEa5hYrBsA0V8YFinzo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771310423, "uuid": "a482f8d5-3a4e-47a4-8759-3d31f4aeb50d", "value": 83492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771310423, "uuid": "7e536311-ad84-45aa-aecc-12290f5ec475", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2deeb352-0bcc-11f1-8369-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1771310699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771310699, "uuid": "2b724417-dbcb-4ca8-8edb-2babcea961a0", "comment": "Malware payload (QuasarRAT)", "value": "51a61230ce950c3c0e1fa73fee40a75f", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771310699, "uuid": "d71883f3-6cd3-4130-8f07-e1d8ac4bb94f", "comment": "Malware payload (QuasarRAT)", "value": "e453ca50849a1ea40fd5da776c8437be61f5bc12cb0d9c93a8aa3903496c66f6", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771310699, "uuid": "5aa7a913-f643-488a-9ebc-37ff1fb4a7cb", "value": "T1AC4623273DC35964C71847B4C03989C277F0A68B3B41C72E7ADE17F89E4258BAB236", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771310699, "uuid": "06716a59-54b1-4c2a-a5a1-6bbb5d48f8cb", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771310699, "uuid": "ee80ad17-7c9d-4342-a65d-28d2a3e16441", "value": "98304:klBKQ/2a9Or4cW+PvkNDHmuQq32yeDGWJ:AByagr4cW+P83QwnW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771310699, "uuid": "0a0cfefc-8fdd-423a-ad04-59706c6c81ef", "value": 5632000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771310699, "uuid": "4a8a4040-8c97-446d-b98c-0f02ef544ed2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35bb6293-0bcc-11f1-8369-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1771310712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771310712, "uuid": "5757dde2-2f95-4764-801a-69ced9127c9d", "comment": "Malware payload (GCleaner)", "value": "caa6119452d9202618c7c4b289f5c183", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771310712, "uuid": "4ea4da5e-506a-46f1-881d-b363dc6e5a7e", "comment": "Malware payload (GCleaner)", "value": "a90498758a078b419c301e31b8b165adc4b2c8635fba2295a4df308cf2f4e4e3", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771310712, "uuid": "058db552-ce38-403f-9ccf-2b1a0c7b6bbb", "value": "T1C6F5D0AA71E05527F516963CBF26DE3CDC12F9C06898C080FFEE158C8A79B4874E25", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771310712, "uuid": "8830701e-b431-4565-ae82-fec181d09281", "value": "234372fce9eaa047bc4c39047910954c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771310712, "uuid": "4a99bf15-f2a6-4488-80bc-00dd280ec767", "value": "98304:xBJMdgx2dI64YYBy/qLetNKNN0A00evpoGPs:x8gx2dZ4Yq2F7Gs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771310712, "uuid": "9691a816-8d76-4e41-9ee7-5883a889ece3", "value": 3628544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771310712, "uuid": "2571246e-b9a6-406e-af65-0aaf8c969348", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d44d4581-0bce-11f1-8369-82aee05be84a", "comment": "Malware payload (PhantomStealer)", "timestamp": 1771311837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771311837, "uuid": "fd7a9dac-fdfa-479f-8996-ca5a51b27aa7", "comment": "Malware payload (PhantomStealer)", "value": "6ec75f612af0acb468e430408b91e374", "object_relation": "md5", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771311837, "uuid": "bf54b489-d87a-4161-abc5-18661dda66bb", "comment": "Malware payload (PhantomStealer)", "value": "196784d5fbf0639fed3c9dc108a283b01fe486e212b4fbba204e3f734f8a8a85", "object_relation": "sha256", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771311837, "uuid": "8547b3ec-14cb-4a34-8691-1a42c547d387", "value": "T193F52320DE1A6DA84AA85616B07F6F041A604B934C0539853FDC65CE6F6FBCF01778", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771311837, "uuid": "7e03ab38-b578-4c11-9935-d4163e567c54", "value": "49152:0sQoOkEnFHqeZwEMRSNcXE6t9d8oEKFFPLqiYR6iTDntktAI0:2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771311837, "uuid": "bbcdcbfe-ca37-429e-896e-d4643895c88c", "value": 3513689, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771311837, "uuid": "eafa3d9f-bd38-4327-9590-89a870bc6658", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "845e07e1-0bcf-11f1-8369-82aee05be84a", "comment": "Malware payload (DarkTortilla)", "timestamp": 1771312133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771312133, "uuid": "2cce63aa-52c3-448d-9015-c2d1579631d0", "comment": "Malware payload (DarkTortilla)", "value": "2794cabd8341794106e90676a34ba86e", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771312133, "uuid": "dd4eed4e-41d8-4721-ad19-d6dfa19ef7e0", "comment": "Malware payload (DarkTortilla)", "value": "e493000f00f812e32b778b48e429b8f9f7716246fb6f962ff194a4ff525e536d", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771312133, "uuid": "99d34796-24a9-45a5-96a0-1a44dae61b8d", "value": "T18D8512312D461A14D9281FB9C066118433F0C89B2266DB7FAFFC11F46EB2F5ACE275", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771312133, "uuid": "40e4b54f-53fc-4fc6-b357-8eab89cf6d97", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771312133, "uuid": "79b4fd71-623d-42fb-938c-e5a7f92a081e", "value": "24576:nKtvbhpLT/4PPH7caoc7xKIcsjU6UsHMdrE6Jv3oqriYg1Ai4JXHaIW9JblNB1:nuLzswao+vjxUsHcJv3d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771312133, "uuid": "c2406a5b-2360-4482-89b3-42b7d37e9e37", "value": 1815552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771312133, "uuid": "b5fc00b3-6a4c-4e36-b3fe-62437f81793b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37d58963-0bd1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771312863, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771312863, "uuid": "79863902-ff75-4bdd-b9e3-2de520ee1286", "comment": "Malware payload", "value": "2961bb968507a5823a6e52742af0a117", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771312863, "uuid": "a2f4771a-2f01-4314-9aa6-69629a6150c2", "comment": "Malware payload", "value": "a9210dd6a6d8394261407b64e53838f0e3e4305e68f477179de096d20e885406", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771312863, "uuid": "f67a57af-6556-401a-b2f9-f95dd0a19fb5", "value": "T159252350EDA9EC610368421630BF2A3569624B476C18B08E3F9D52DE0F9FB9F017E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771312863, "uuid": "136ed26e-ab58-4fa2-ae53-2d0aab33cb41", "value": "24576:tniyl0KHX7w6wGsc4d4H10GupIVJsHfq3Sjzfrow:52YbwVijZmJvz9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771312863, "uuid": "e0b6ca74-b119-4dc1-8e87-ce1d399e9f19", "value": 1039133, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771312863, "uuid": "0e93af25-d219-4d06-89f3-d8fef637cb93", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771313364, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771313364, "uuid": "9c2cde39-1d80-4454-9f73-f9441dafb5d0", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771313364, "uuid": "5991f2be-2df6-4a4f-866a-58eecf017db1", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771313364, "uuid": "5f8266e7-00d2-4053-a162-93c5b42a4e86", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771313364, "uuid": "57e783aa-3e3a-483e-90c6-e1e617a3853c", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771313364, "uuid": "17a859bf-7ecd-40c6-b3e0-e8eeec6441fc", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68a2548e-0bd4-11f1-8369-82aee05be84a", "comment": "Malware payload (DarkTortilla)", "timestamp": 1771314234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314234, "uuid": "5d679bee-8d54-4b6d-912a-a9d32201b48f", "comment": "Malware payload (DarkTortilla)", "value": "57df3640d43a6eb609537dd2a486cd43", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314234, "uuid": "b173fb1a-6771-42d7-8559-9e476e384da2", "comment": "Malware payload (DarkTortilla)", "value": "41065376e44e187979cb05bbbcc102ea7d61b110c49907195e2640ed3500843f", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314234, "uuid": "9c994cf4-48c1-4a57-978a-cfc221917d44", "value": "T1BD5501372DC31660C9A50F75D2A914E973F0CA5B1155E7BB6AEC02F4ED62B0AC8235", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314234, "uuid": "b1512935-20c1-4099-9a88-8cbcb14d0910", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314234, "uuid": "84604b7e-fcb6-4efd-b299-30dc262236c2", "value": "24576:m167hpLT/4PPH7caoc7YCnRveYepqMKDmfC4KOSSn2n6kJblNB1:FLzswaoyRveYkqM3fC41p2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771314234, "uuid": "3f2d90e4-2dc3-45b3-b125-7d6a48d06d1a", "value": 1390592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314234, "uuid": "447c3c56-749d-4044-ae97-bee54302a300", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8e8dda2-0bd4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771314368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314368, "uuid": "ffa283e6-14f4-4a21-9917-e5457ef60c40", "comment": "Malware payload", "value": "f24008a89b4cd95e359bac55c31fd3d5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314368, "uuid": "ed04cd3f-0ea8-470f-84db-b622666fbbd6", "comment": "Malware payload", "value": "c8a12b4b2e836a32fca1440b59394819e252877a1d33a661635309c6c573fa72", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314368, "uuid": "e5e6f713-273a-47a5-b3fe-fade77b40f2d", "value": "T1E8316D1499D18377298124ABC100BDCACAE39E7CC3F109747D8FD8CBC698ABCC6171", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314368, "uuid": "bcf3f35b-bcba-4d50-a9cc-a0fd969cb1ef", "value": "48:L+gmXGMWQolGXGAaHLE1XGAaBLE1XG4vLEEBXGAaXLE8XG4XLEEfg:LeGT0GA7GA5GIFGAYGMfg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771314368, "uuid": "9cf4f1cf-3299-4811-9267-d262f0d03da9", "value": 1555, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314368, "uuid": "052d798c-479f-40bb-87d6-6e8376a3b34f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbeeef2e-0bd4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771314427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314427, "uuid": "0f6d1448-c407-4e20-b939-2211b53fec42", "comment": "Malware payload", "value": "18bd2b846c8c70341f3c6a77cf5ff929", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314427, "uuid": "926988f2-7c21-45b1-90da-8d367accb6f8", "comment": "Malware payload", "value": "55ed77b15797c81f13f3cddc818d23e293d90d08b0764a675505ce99b94b1c3f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314427, "uuid": "120ca450-6cc3-4140-9b02-c4a529aa5792", "value": "T1C5233BF60723ADCF972B0D21E50C1205ECA8E8A772D990BDFF8109594EE9518CDB4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314427, "uuid": "c9cf64a5-87cd-476e-8324-5975ac21cf29", "value": "1536:D68wy0cvvO+9ADZZ2VAryLgKg0vZMjmg8Ks+VB:D683TOYQ2VcykKg0BOt8V+VB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771314427, "uuid": "34ae7b22-fc53-4f62-9274-dea5beba5f86", "value": 49839, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314427, "uuid": "3e9caf4e-8ef8-487a-b55d-4c361341fe4c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd5284b7-0bd4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771314429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314429, "uuid": "94637204-9877-4bc7-8c19-9fc22e05be84", "comment": "Malware payload", "value": "c950020f163ff0013fbeb85a542fe1a3", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314429, "uuid": "b1512cd5-30b4-4915-9c3a-0e0bbb4d97d4", "comment": "Malware payload", "value": "537c0c4ae5dab8d416b7b550a7cf459f944e87986e12a597a89992bdc62d9ba5", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314429, "uuid": "4c6d9487-7133-4dbf-89f0-c5565bad0cb6", "value": "T141E44B7652B25C3E497D0B59F47413A03CA90D9BDDA0D0966F82B1B0A2FA43497FF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314429, "uuid": "c2c62b63-994c-4ae6-8ff3-147996807912", "value": "12288:OxvpFOrlfDLt0oSgZp4JPTN52NHVGMVUAahZ1DIYM7dy7FkUUn:4vpFOrljCJPKLDM4pk7Fcn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771314429, "uuid": "edaaf25d-dbe9-4a26-b265-2eacaf40d864", "value": 704634, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314429, "uuid": "4a9ed20a-9f7d-49bd-a86b-681222f79421", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01b6fa82-0bd5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771314490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314490, "uuid": "dc9d2de3-cf55-40d5-9b45-f76e5e2f18de", "comment": "Malware payload", "value": "ee3fef658eb7a4894e26008eb4542397", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314490, "uuid": "013b920a-9146-4ffc-ae86-03283752c1a9", "comment": "Malware payload", "value": "9b2f78e07b955f85af546c231256a6b72e18d6599f52f61487ef34d264e5106d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314490, "uuid": "df76213f-544d-4383-8d41-adb0ffb7e72e", "value": "T18BE4AFF65395EC8F0E1C0E95F508074A1C6C48D7E6B8C2B47A82B8F986961A44EFDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314490, "uuid": "15906c10-fd58-47e5-ae93-6c7be6ac734b", "value": "12288:VdVh8P5yyBqrjjZ0W2s4oO9ZYg3UtSwImcyjaJ+hE7TqvIwE:VJu/BqrjN/2ZoOH3UtSwImcyjaJ+h+Tp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771314490, "uuid": "e1421362-2e47-47c7-b305-b724575234b3", "value": 675840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314490, "uuid": "cde3e0fd-3e73-4d75-b8a4-4c11cfe20a27", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "237d8186-0bd5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771314547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314547, "uuid": "c190dea8-4f2c-4af8-acb2-58b9f99f788c", "comment": "Malware payload", "value": "a577f25139db37567cf68c8c194a975f", "object_relation": "md5", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314547, "uuid": "829cfec3-4b2e-4685-9112-673c825a3b22", "comment": "Malware payload", "value": "08cd43a806108e96a9f7d7eaebdc3fd28e8bf772e5718463929f241795a99db3", "object_relation": "sha256", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314547, "uuid": "aa9f608d-cb44-47bb-98d7-622ee81840e8", "value": "T194652361EC599E9917A4A209A0DF5E5178B01B838E1C70123FCC64DE6F4FA8F51750", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314547, "uuid": "50f4d0dc-15a3-418a-a244-2c8813cd0d8f", "value": "24576:EsUk+6Jh+P8VKEEevTkErD6/PO1GpnE0r3xsPQjUdgYK8tAKDdYIdNbbZIkjQe:ek+c9ce/iO+3xCNFJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771314547, "uuid": "54ed6d79-9ab6-4a85-9231-1b4b04f4a321", "value": 1507165, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314547, "uuid": "4a26eafc-6ad8-4044-a85e-2ec1eabefbf0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a073788b-0bd5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771314757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314757, "uuid": "7d42fb13-f14b-476f-b951-3ed9bba7d6ad", "comment": "Malware payload", "value": "8c42a098f2ebdc0eac9745bb4c7f9641", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314757, "uuid": "54158169-82ee-4f47-91d7-ecd2f0a28527", "comment": "Malware payload", "value": "14fc0065cc0b3ca215ffdf14824e41fb0a7840e8e771dbfdc3bbb06a9e042e9e", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#21806b", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314757, "uuid": "8cf83227-cc30-476b-bb50-a5dd10537dac", "value": "T154341262E75005DD4FB1C0A1F12D921FE7A1328E42A529CFFB664F511663D123F2CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314757, "uuid": "2712c605-4c8e-49c7-b3b7-73b794c2417a", "value": "6144:yqTzFtqoCBL/JYx3YO+XCrXKIl/uTSzv6jRqm6ysB:BYBDJYZYO+XDIFHzv1m6JB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771314757, "uuid": "0d4c3f96-8a1b-4e7a-917b-90acaaf005dc", "value": 243275, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314757, "uuid": "91220222-7938-49ca-a76e-1a7e03e5a13a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81344c0d-0ad1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771315988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771315988, "uuid": "c2cc8d83-3277-4728-a153-1c4ac9542cb9", "comment": "Malware payload", "value": "8b2051f5e2d428947bdee1e903029343", "object_relation": "md5", "Tag": [ { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771315988, "uuid": "90dc1c2e-5ca5-4c25-bc0e-06bb4603dbad", "comment": "Malware payload", "value": "656991f4dabe0e5d989be730dac86a2cf294b6b538b08d7db7a0a72f0c6c484b", "object_relation": "sha256", "Tag": [ { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771315988, "uuid": "ea6d9e4c-98eb-4bfd-a6d0-85fa8647640f", "value": "T195D58C36A2A2FDD5432A2DE8C1843D120C9C4AD7577142ECFEC94ACFA06E154DBBD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771315988, "uuid": "f8c4c154-e053-434b-a0c0-a0f7b985b562", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGPM0wgHGnv3UcN:8UixbItdTrJoFVPMvXGNzkx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771315988, "uuid": "aa8aa9b1-c624-4c7e-bcf0-4b24f8c80293", "value": 2900144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771315988, "uuid": "61be8bbe-68d2-49be-b5f1-4d90721badb0", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0507b79c-0be4-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771320939, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771320939, "uuid": "9cac22fe-cbc8-47d1-a8d3-95fcd46efc6c", "comment": "Malware payload", "value": "cd049bdb2b32e7c0b42f82ef08dac747", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771320939, "uuid": "6fdd6b1b-0eb5-43e6-ade2-489f3087e95b", "comment": "Malware payload", "value": "78f84e557156cbd978cf9bf21c416c56fdd774f1eb45ebb829905cc513c70cdf", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771320939, "uuid": "6eb0a7f3-134e-40e6-9cfb-88f1c08ccba9", "value": "T1D134F11DA22EAAC83C838F954F0C775C86E4DC1CE5C4AFE85A52746DC5CA48FB8F54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771320939, "uuid": "0a0cc726-3bac-4e1e-9c4a-66c7cc9343ac", "value": "6144:73yNm8i3n6f1fPSraWoxQ8pgv4S9xLSLFZsZisZaNp:jyN9o69XWFAgv4SzuFKisZu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771320939, "uuid": "00d30321-8fc2-4500-abc7-6167894df5c4", "value": 249949, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771320939, "uuid": "2fd70ed3-8e12-411f-84c8-564864a15c17", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8bb927b-0bf7-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771329427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771329427, "uuid": "093d8f8f-c25e-4fb1-97ba-7cf9a486c6de", "comment": "Malware payload", "value": "cbd5ecbc88acacb3b714629d0bc1535c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771329427, "uuid": "5605fff5-62b9-4342-8deb-6201119b5529", "comment": "Malware payload", "value": "e06dbe87f6cdcfc942f274c4d7883a5ebadf48b7d5eab2a9ef0e900783a8e915", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771329427, "uuid": "695445cc-48e0-4521-96c3-7c2ad5a909ba", "value": "T1640623137C85C139DC3218B1CC8F9EA51E386D707E524947B7A67E4ED9B1B809B273", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771329427, "uuid": "a9809b55-b399-4270-88fa-c49e35768063", "value": "49152:cZr3+qkejHzM+pq8kB3R4SKkyMZVJOdjLrx9gigzFUgudmWg7I0nS0azEHvD:i77o+pq88JXsL19gvGvk773FaIH7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771329427, "uuid": "423f9897-7a45-4653-a1d3-46df3d73da9c", "value": 3832320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771329427, "uuid": "ddbdb01d-3216-4372-b115-58aeeb3772ce", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b913a74-0bf9-11f1-8369-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1771330103, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771330103, "uuid": "fe6b2450-3702-4bda-b31f-df13fadc71cd", "comment": "Malware payload (RedLineStealer)", "value": "45ad46945b5a298a03b6c3e31edd7681", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "e3db0b", "colour": "#c7deaf", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771330103, "uuid": "6e101f3e-1e30-42e0-add1-4f6cd2e7ddf1", "comment": "Malware payload (RedLineStealer)", "value": "cc6bca67fc61eb4fd0e9d8e6cbf058f4f21aff8ae0824fc5557c77cad626039c", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "e3db0b", "colour": "#c7deaf", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771330103, "uuid": "1e188141-5a9a-44cf-82f3-edcc26420088", "value": "T118871212B9AD16A9D5FAF1388479A211B67238650331BBC71BE8157B1F376D42E3F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771330103, "uuid": "e274d830-9144-4d36-81ed-553e48cbc450", "value": "1f74bdd8275d1c99b371f4a5243e6cb0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771330103, "uuid": "3e620d2e-80b5-4668-a025-0246426f8715", "value": "786432:Ji51FLXqrRtboS/N1ILX3JtUpTbLYH4aaj3SWL:U51NqrvbL1u3HUxbt3R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771330103, "uuid": "af23d890-7eb9-4d5c-931f-e5f8a8ce556e", "value": 36521472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771330103, "uuid": "b067b916-1629-49f2-9b5e-cc8c3f3e0dd1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88224873-0bfc-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771331466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331466, "uuid": "f389a5d3-9c3c-4f48-a70c-a03b0fd30747", "comment": "Malware payload", "value": "8b412cd384350af2f95a43f40acc1df1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331466, "uuid": "95518885-3864-4a1e-a780-ff0b96c79a70", "comment": "Malware payload", "value": "6743f8703b8d176d48ab364ae711c7fe251b1d66191d916397e229915df420b2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771331466, "uuid": "78c9c0c6-58c7-4615-bd80-fda2b04c4a5a", "value": "T1C23412B917EF0FC4CC98EB6A66EFC0D0AEC981354C17F30048299BA06339E566EB5D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771331466, "uuid": "b2a2fff9-4deb-407e-9646-c9766e1e61c4", "value": "6144:xWeX2rbpuBH92wYCSMUbeHb5NvgPP4BBLQRVC4Saw6qCSn:xbXJBH92wtIbeHb56P2BLh4dfSn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771331466, "uuid": "9391d7ad-4e89-43e3-bb4e-53dd922f3018", "value": 241728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771331466, "uuid": "db98d3e5-8318-4092-95f4-faf30a2051e7", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab6eed56-0bfc-11f1-8369-82aee05be84a", "comment": "Malware payload (Meterpreter)", "timestamp": 1771331526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331526, "uuid": "b293f330-58f5-4427-b0fc-b36dbf495a84", "comment": "Malware payload (Meterpreter)", "value": "eb0901c83ff26909348c6223b9c39352", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Rozena", "colour": "#def27c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331526, "uuid": "dc83face-e74d-42aa-95aa-6b7c0c88dd2e", "comment": "Malware payload (Meterpreter)", "value": "1abc133966ea5edf3820bbab01bdbfb6c14555bd7be174e0be18870e3469ee6e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Rozena", "colour": "#def27c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771331526, "uuid": "19d391fa-5c77-44a1-8623-b725d4a3ef78", "value": "T17673BF46C9C01966D1A3123D5B753AB6AA34F5FA3601C19F3A8CCDE5DBD1CB0A3663", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771331526, "uuid": "c8a9ca2b-6f02-4e73-a20b-fb1aa8aa4b54", "value": "fb6bd8ebf4e6421b53c55dfe7d3c43af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771331526, "uuid": "39adae65-8875-4438-b0e8-a77e3cf935dc", "value": "1536:IfjhGeNH0UaAaDFwJA4+s+oQfYq5RxMb+KR0Nc8QsJq39:RsH0ZAaB8ApsyYgRxe0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771331526, "uuid": "91d75f5b-4f92-4787-9b79-f6088cef0f22", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771331526, "uuid": "2f633630-4efc-42d8-a8b2-b05dfbc84055", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "187c5167-0bff-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771332568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771332568, "uuid": "0ab1f0d2-7660-455a-ba75-4e7714ff0378", "comment": "Malware payload", "value": "ac2d554f0607313985d30edcb57c8989", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771332568, "uuid": "ab107fb3-b929-43c1-a30c-e8846993715f", "comment": "Malware payload", "value": "b7c1a3cafdea2b125311a48736308e7ee8179534bb0747645e97b03b41710568", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771332568, "uuid": "7a609967-ba4b-4d90-8703-57ef49b8663d", "value": "T18D852347481B8042C8F6857C4663BAFA0FFF735450826A6D54816CEF32C7EBA79C96", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771332568, "uuid": "83d2a033-0afe-4ca2-908d-a53c98b32010", "value": "81bbda50a2982e0e014acf537665f7af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771332568, "uuid": "82efdf26-659c-41f7-8b4b-a46a035260ed", "value": "49152:YfuRSHpn6nqiVAlTI6N9Lw+YyMtxOoRZx:YfZMrAls6N9EV379Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771332568, "uuid": "20de60d7-c54e-4ab0-8bfb-167dee1e9f75", "value": 1850368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771332568, "uuid": "b9847fa0-e9a1-4ab6-a481-04c024640893", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8f7a065-0bff-11f1-8369-82aee05be84a", "comment": "Malware payload (PhantomStealer)", "timestamp": 1771332890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771332890, "uuid": "add7f611-b445-4e0c-8eef-b25c95cb53cf", "comment": "Malware payload (PhantomStealer)", "value": "6fadeac34b74382f8bfc6d15f9431b64", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771332890, "uuid": "2ce37fe8-6f38-4270-9c32-2ffa2e02b892", "comment": "Malware payload (PhantomStealer)", "value": "cb26297f974f33bff2a5fb526f501b167046f3219aa11d8bb5e926f89163106c", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771332890, "uuid": "8f041cb0-508f-43bb-8693-1b6cf892e254", "value": "T10E8512322D461E14C9280FBDC06621D433F0D88A1666DB7F6EFC01F86EB6B5ACD275", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771332890, "uuid": "7931fb46-ee78-4e89-bc4e-ac0326dfc2bb", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771332890, "uuid": "ca570b8e-e769-49df-920d-3b1d3723f006", "value": "24576:Q/WujIhpLT/4PPH7caoc7aKIcsjU6UsHMdrE6Jv3oqriYg1Ai4JCHvJblNB1:Q/4LzswaoHvjxUsHcJv3i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771332890, "uuid": "2ab55367-2025-4525-a381-bfc6b62e0622", "value": 1814016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771332890, "uuid": "ed5760b2-d0ef-42b8-a8bd-a31b3322d008", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37fe0378-0c00-11f1-8369-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1771333050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771333050, "uuid": "9b81bba8-46bd-4ef5-8362-2ef2ad9c6c10", "comment": "Malware payload (AsyncRAT)", "value": "64e35aa0ac4a03a542890cead08046fa", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771333050, "uuid": "3e509ae3-1454-4bcb-b840-286b19035d3d", "comment": "Malware payload (AsyncRAT)", "value": "c5abb8f607614ec7063c3a2d84d26f444ae82fc60c9d9ba4d3e13ff137594cf7", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333050, "uuid": "72abf2b2-8c21-4a15-8773-801ffda05138", "value": "T123F4F1326E862A24DA790FBDC066149537F0C847625AEB3B6FFC00F46DB3B49C9275", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333050, "uuid": "6b99c5c4-48e7-46bb-9f37-c5753c186f29", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333050, "uuid": "4fdb6ca1-c12c-42f6-83be-4ac51040b571", "value": "12288:DIyHAXRNGszIMjy1j89CFnLT/N0HPNI0iAxxrKXBxoo1C7MYzcH6JblNB1:D8khpLT/4PPH7caoc7MwcaJblNB1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771333050, "uuid": "8d74657f-e1f8-4fd4-9d43-31e4fd109e18", "value": 777216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333050, "uuid": "b87d83fe-7db7-4695-935d-c9a66279e88c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc16eca9-0c00-11f1-8369-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1771333272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771333272, "uuid": "3e021d50-042a-481d-a1c9-0414c1ccdd85", "comment": "Malware payload (RemcosRAT)", "value": "ee718fbf8996ef12cf62f410ba489d00", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771333272, "uuid": "970f292f-e459-4106-bd9a-734862f68d8e", "comment": "Malware payload (RemcosRAT)", "value": "50116fca27249e42e0304690c9c3f41f237a9a80064896aa8caa5f781669fbb8", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333272, "uuid": "3d2f057e-15ac-4cc5-a941-8f7f6a86881e", "value": "T19355012B2DC31564C9A54F75D2AA04E873F0C65B1115E7BB6FEC02F4ED62B0AD9234", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333272, "uuid": "1da7e928-3c45-49d4-82d0-9447c07731d8", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333272, "uuid": "91c293fe-d2b3-4c91-b299-a5265ef63fb7", "value": "24576:SHSK//hpLT/4PPH7caoc78CnRveYepqMKDmfC4KOSSn2l6lU4JblNB1:MLzswaoMRveYkqM3fC41p2r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771333272, "uuid": "ceea63ed-04e6-4ebe-a325-98eef65c7694", "value": 1392128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333272, "uuid": "4a78a50a-827c-4b6f-8df0-72b0faa10a97", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e2eeeed-0c02-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771333973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771333973, "uuid": "71765dbe-0bbd-4732-8e55-0097e3c0b85f", "comment": "Malware payload", "value": "d74c9c50660a7d928ae5dcf667661f31", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771333973, "uuid": "33454b56-4012-4e37-8cf2-72fc8a5ea6be", "comment": "Malware payload", "value": "16b394d76cf5663a9370672de28ef6016233c3d4415492a731834ef01f1386fe", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333973, "uuid": "0fee460d-2f9a-4700-b2a0-4f809055fed1", "value": "T19E46232B3DC39914CB1D47B580798DC277F0A68B3B01C72E7ADE17BC5E0154AAB23A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333973, "uuid": "efe42ced-9196-4428-917e-c272cf10826b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333973, "uuid": "4b15e308-0188-4a45-9086-dd3519b0773a", "value": "49152:amLzswao2kFAn/2Gnw6nxwXqiMOrENcitrFkPvhGR7thSoWYfy8jg78uoX5aQq3S:57Q/2a9Or4cW+PvkNDHmHQq32yeDGWJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771333973, "uuid": "0528ba71-8035-4d3a-9879-5326ca2b466f", "value": 5625856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333973, "uuid": "82b674b0-6287-4e08-86f0-0efb0f2fc66b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98e3b7bb-0c02-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771334071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771334071, "uuid": "a6a8c294-99d0-4d4c-8f74-e9ed36ac12a1", "comment": "Malware payload", "value": "ced94cb405720e8b10bae2cff61a054d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771334071, "uuid": "48779efd-fc85-45d5-b55b-8e7b58271a55", "comment": "Malware payload", "value": "82194f940853db75a671298b59f1fe1c2c458cf623942c673a06cb21f834c691", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771334071, "uuid": "b98f034e-8d5a-460b-9df5-81d1ac936791", "value": "T1D8A52342F8C485F3C4511C331B65A7616A7DBE202F268EDBB3856B1DE9614D0EB31A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771334071, "uuid": "b86f4c3a-e8c8-4648-974d-f92f70fe558b", "value": "12e12319f1029ec4f8fcbed7e82df162", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771334071, "uuid": "e2139d88-025c-4a37-9c6b-827ec16566e5", "value": "49152:ABRITpc8iYM5pF9UBB6jdLXsuuX4/cqZIiQx6lSONx:aGTFM5pXUBB6BLXTuoEXx6lSONx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771334071, "uuid": "441dd96f-3b9f-4e9e-9aad-26127405d87e", "value": 2110512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771334071, "uuid": "6cd9b345-1ee2-449f-a3f3-f44dc76c7e63", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da643434-0c02-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771334181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771334181, "uuid": "eeae9570-4e00-41ec-8d70-b9127c65e080", "comment": "Malware payload (Mirai)", "value": "75b2ef77b19d207e1288784f3c5cdce6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771334181, "uuid": "71df8e6a-73d7-4def-9c6a-42ca33122447", "comment": "Malware payload (Mirai)", "value": "f5d6e35d16cea8448b7e3faaddea0e855ea1d47838e27555a7c2433f31159a30", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771334181, "uuid": "ef941596-b322-4c4e-b90f-57dce5565fd6", "value": "T1EB5182BC6AF26E37C665CF0870614A79F00BE5C86CE3CED8D47E18E8856B705B210E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771334181, "uuid": "4934c458-3f7b-4121-80ee-3113b7c0b339", "value": "48:z56fS7fyBH7HgrfST9TzPf1PdBwQmKmBxbi:F6+ftfST9TzPtPdBvmKmBJi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771334181, "uuid": "244e78ef-bf8f-43d5-b7e1-414e48b09a56", "value": 2504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771334181, "uuid": "f54eb861-a329-4147-827d-d16f91a7214c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b98d3293-0c03-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771334556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771334556, "uuid": "95986e57-8db8-447f-a282-86220d966a6c", "comment": "Malware payload", "value": "ea3dc52eda8b93207ccce4795ede32cd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771334556, "uuid": "9b1ec7d0-503a-4690-97fe-7bb82d9b8b13", "comment": "Malware payload", "value": "f6d422ec4d04705aedb4f75b2e1998bdb4ebf1106bba2f317187eeb19a3a7a86", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771334556, "uuid": "c552464c-4c78-4eec-a53f-5a9eae56a0ec", "value": "T1A98308327589582A210B028FD263336C70EFD8E2D611E5B6F6F922344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771334556, "uuid": "d67a74c9-a895-4841-a483-a5146b4dfa7e", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbn3WaeVN/:XEKltp9t2SX/yr2pb3WnVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771334556, "uuid": "8f887ed0-d934-46f1-9f54-91417e4309a9", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771334556, "uuid": "b829da62-1d68-4920-baec-33ead81d025a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "002ca487-0b52-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771335235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771335235, "uuid": "0579d005-8066-46a6-bf6e-2b983a4dfdd5", "comment": "Malware payload (Mirai)", "value": "735e25d0f6eb92ab706727bdbb6b9099", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771335235, "uuid": "2158c8dd-7854-42f5-8b6f-bc56269d6b5c", "comment": "Malware payload (Mirai)", "value": "c44434244af42a2ac8f09f0abc4429b38833d83927e7ddb231bde215045a2d26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771335235, "uuid": "49d7c281-a520-4d88-9e7c-4bf9b9a95a4e", "value": "T156B3F616FB610FF7D86BCD3746A90B0529CC551A22E83B7A7974C42CB24B14F4AE39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771335235, "uuid": "9da95d30-30df-4a24-8ed2-d28190057ae3", "value": "1536:pMAUIIqQHT/uaX+HA09bPH+imC1jdR3uJCq9uVXkBPZM05RDlaanzVGY:p5UIIDHzuP9bPe4fq9xhF8anzV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771335235, "uuid": "b5ace293-2a40-4ff4-9d0e-1480acd2a360", "value": 110708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771335235, "uuid": "39e83bcb-f924-4eac-b28c-5d14b29cecbc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c31df2c-0c05-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771335312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771335312, "uuid": "dc49299d-362e-40b0-8927-9d72676f9544", "comment": "Malware payload (Mirai)", "value": "8baf99f821fe0aa410157e3d6a1781f1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771335312, "uuid": "7b2eec10-a9fd-4496-bed5-39d5a9e546d3", "comment": "Malware payload (Mirai)", "value": "474bb1cd8812f6ea28f51f6d6f01e506ef543a1975fad440bc841622b5a23195", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771335312, "uuid": "6fed7763-ff68-44ad-99dd-7a8fe6710acb", "value": "T137F012EA61B6A9A7C2748E0470E14875E019D7CC7CF7DF8CD4AD0CAA4847B107214F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771335312, "uuid": "7d77f933-6540-47cc-8b5b-48e73906a7d6", "value": "6:b8Slc5kSlcxIbWrSlcckSlccd0WrSlctSlc1WiGrSlcPkSlcULhFWrSlcvH6Slck:bHIDbzFtdSpOithFzodLc0LK27", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771335312, "uuid": "2631087e-76c7-4dd6-a581-6eb43f3f344f", "value": 544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771335312, "uuid": "711d5d90-cd67-4921-bc31-324b631c86ea", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc7cbaa9-0c07-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771336386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771336386, "uuid": "6d429112-3b56-4df6-8997-4938187fbdf2", "comment": "Malware payload (Mirai)", "value": "2a8ba1d9b74cd1c94ab78ffb34c8bca7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771336386, "uuid": "ceba985e-7abf-477a-a004-54e88d01affd", "comment": "Malware payload (Mirai)", "value": "0649c80bd060ab0188f57984206a6a57bcdf053a2df1dec1cb05feb423c3cabd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771336386, "uuid": "10c84a22-a1db-428e-b2a0-0a3f6760359c", "value": "T1E9C2F2704E27B56EEC96F9313A55E712E5EBF40C7568B64230A0904735DFC280C6F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771336386, "uuid": "5d7725ec-afd1-4cf9-ac62-c49ce0c323b3", "value": "768:EiJluey4da6kBPPMSLMcfVixW4/wUhssAM:PJ8ey3zNbrisb2xj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771336386, "uuid": "7955cca3-3cd2-4a03-8125-f15aefae3f68", "value": 25804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771336386, "uuid": "2e036b3b-8d54-458e-b15f-442b15366535", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7090b199-0c08-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771336581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771336581, "uuid": "a5cfbac0-ac12-4cd6-8de6-953046328716", "comment": "Malware payload (Mirai)", "value": "98935bc730ef0e9acfb984aa757e6779", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771336581, "uuid": "69b2fb79-ab70-4f37-9e84-5a76246efdfa", "comment": "Malware payload (Mirai)", "value": "b85d83b714fe4bcd711ab77281258788dc5e1f513f9580dbfcf6b4ad6c1ad5d6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771336581, "uuid": "b0af895f-5036-495a-880f-c8539a6fb8e6", "value": "T131011EA864B2AE57E366CF04B9A237ADA019A1DC7CE6DFE4D02D1C59485B301B315B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771336581, "uuid": "e35e90b8-092c-4327-a797-badf06bbf930", "value": "12:bCjTfjTDbGj2Ij2tdJjRkkjRktjgHk5jgHkthFGjbogjbLc0LK27:b2H/bSzsdt3igHMgHghsT3fK27", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771336581, "uuid": "3a501690-6517-4540-b0ed-360b0b158172", "value": 684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771336581, "uuid": "090bbe4a-a2d0-45ba-ab41-8c0079135366", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3a10069-0c09-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771337123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771337123, "uuid": "ee25c077-7592-48e5-899d-33706166550b", "comment": "Malware payload", "value": "bb7774148564840e4227e642abb44f75", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771337123, "uuid": "18e20d9c-c7f2-43fa-a203-7c33ee442418", "comment": "Malware payload", "value": "5b79ad41c1b291d442227c4b658174f35296d0789a661a4bc334f31e6db8d2fd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771337123, "uuid": "edbc2b33-6573-4442-a0a6-83efd77e11d8", "value": "T1EDF01DAC3FF26E7785705D69B02606A6E21BB08C4CA78A98A42E542E8677B40F3109", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771337123, "uuid": "5e3b765a-ad61-4c80-a46b-720caf930df3", "value": "12:bi8T75T7eb7IQIodKPoBwhF7mCBmna0LK27:b3T9TKb7PfdKPoBwhRmKmBK27", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771337123, "uuid": "7274b402-d707-48e7-8f48-bd34aa14fb33", "value": 544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771337123, "uuid": "a72bb13e-9330-4735-9672-4cc2af6f1551", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1799ec6f-0c0a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771337291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771337291, "uuid": "a572e7e7-a8b4-41bf-befd-6838db3e6cf5", "comment": "Malware payload (Mirai)", "value": "7cc6d1c2f9983a97aab169b3ea5022fc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771337291, "uuid": "069b922d-68c9-4622-af2d-eab16a08dbc6", "comment": "Malware payload (Mirai)", "value": "c0f6ed8525a832abff1ad8bcc50760b8d544918cb86546bf25efdf305f90149c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771337291, "uuid": "24a579f8-79ef-4fc5-862e-523e0514f2ab", "value": "T161B2D0203179A6B0E37058317C65C981B7B78DB92E9D37267A6487F8B1D651E30F06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771337291, "uuid": "9fa519dc-07ac-485d-bf64-5d20c0a58707", "value": "768:dGj3t/wQy40t4eclTXZ2K8F/8yAs3UozE:dGzt/wQkMTp2KC8EzE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771337291, "uuid": "a9c0e74c-b972-4601-bbc0-6ad1af5793f0", "value": 24744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771337291, "uuid": "4ae68d05-0b31-445d-8456-d79609c4689a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f579fb1-0c0a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771337330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771337330, "uuid": "488b4754-fdba-402a-9538-de73f69130f8", "comment": "Malware payload (Mirai)", "value": "5f201b6f7b2ce284a12392b2ce622564", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771337330, "uuid": "8579a15c-ceb2-4ab0-969a-426c548b7d91", "comment": "Malware payload (Mirai)", "value": "ac1bef4989f8e43c61c823ffde0f6ff2af3733e873d8186d66f4d29e8b2cea92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771337330, "uuid": "28e704ac-c9c0-453b-b102-ace0e057e6ad", "value": "T190230233CD2B99A3DC247DF0EC58C77160925F2AA0B9F5B23ACE47187B9551406F84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771337330, "uuid": "a9067a1f-7190-4674-b74d-6a3750ce05ef", "value": "768:G0WIEREyxCD9DvDNXQtFawDe3+9q3UELzod58P2x+lv:BWjR6Dd7Nai3jLzod54QKv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771337330, "uuid": "70b87c93-aed9-4079-af1d-42467a4702af", "value": 49196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771337330, "uuid": "e93cf5a9-e9fe-4f23-8b4a-ca5d25adf08f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ecf7bee-0b5d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771337795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771337795, "uuid": "00c7bb64-6e0d-4c2c-8d9d-d61633a17c18", "comment": "Malware payload (Mirai)", "value": "72e6c1b34f11d46858d714105ed8b836", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771337795, "uuid": "83f52041-b959-4b3c-9892-fa6c8ab6d8f1", "comment": "Malware payload (Mirai)", "value": "2794c0c0323058fd26978e492749979a6df335167cb6cebe9ad21de6de4ce72f", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771337795, "uuid": "a6a391ce-333e-4864-9542-95aab6d0d248", "value": "T12E834A55BC818A22C6D112B7FB6E42CD371653E8D2EF3207C9255FA5378B82B0E7B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771337795, "uuid": "b1b42287-cb1c-40e8-88db-a7c9e221d9ab", "value": "1536:mUjGYM6OnSEr9VzdICfkW9KGHTOsvrulCqMqPr5X1SToBHoPVuqX0TaOkIqm++Ok:mUjGYVOH9BdV7zf6gqrr5FYoBHoPVupJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771337795, "uuid": "6c33f5d7-ba19-4de5-a17a-75435f099c48", "value": 87364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771337795, "uuid": "a22563a9-6f52-47b6-b71a-43c3296e71b9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09078b68-0c0c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771338125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771338125, "uuid": "02582665-e9d7-4a5a-98ec-3d58320b82ea", "comment": "Malware payload (Mirai)", "value": "8d8a7b1ecc0efa2445f4f039eace3222", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771338125, "uuid": "e6db7945-c08a-4fad-ae29-1200202a47d0", "comment": "Malware payload (Mirai)", "value": "ddfa2b04d7f884ffddb549abfaf272ce1d87afd7b4147116187e70be3f652e99", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771338125, "uuid": "7e29cb69-b46e-4900-82f2-e39b869f9994", "value": "T1BCB2F1A7D18D27D6EF7DDFB221A193E137E08BAA33EAC44564C25E11190BA36D002E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771338125, "uuid": "d55f7aa4-3f58-443f-93b1-47c500310741", "value": "384:MG7ORHfCjNAPH+Z6TV5STrhHKyyCb5NK4wdFY2XMzNY9sfsFOVpmvxxIBVShPSge:3+/C+PH86TvYFKDCb57mXMzGWU8TmnI5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771338125, "uuid": "6035567a-506b-468a-8ced-40926f5917d8", "value": 24408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771338125, "uuid": "24a5fe6c-720d-4d69-bf07-e3d302a1cfb6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7e562cb-0c0c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771338418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771338418, "uuid": "a0d3131d-9405-4e7f-8a3a-dd98f70f4c23", "comment": "Malware payload (Mirai)", "value": "226fac4404cd85de30fb76806a58f58e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771338418, "uuid": "233a8b8a-f322-4438-986e-fe0a9797674d", "comment": "Malware payload (Mirai)", "value": "0237eda18f42ae545730b732e81327f3ef499b369fae7188b3f3965526ad799f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771338418, "uuid": "5f7fbfaa-9359-4fe7-9643-60f5452f1da4", "value": "T187C2D1FDDAAE2D87DB7D5CB3A18D2A605E11D0E47BC9C70C93508C487E15BAF648D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771338418, "uuid": "d6f4b07b-a06c-4bc3-a509-335e9da50819", "value": "768:mfRMYLEZgkb744DvVWtOQLobC5rc0IBPggYrW/:8RvYZg6740WF8Cw/h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771338418, "uuid": "db9ef476-343a-4cdb-8788-5d6b88e31908", "value": 27552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771338418, "uuid": "db7e576d-1d73-4876-b1de-5fff20c5849d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbe8fde0-0c0c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771338479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771338479, "uuid": "655f4dd9-af30-4e81-a406-892d016657e3", "comment": "Malware payload (Mirai)", "value": "b5cd4ae80f00524a5ad700100d7584ef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771338479, "uuid": "9c7ed4be-903e-405b-8336-3a41714fdaa2", "comment": "Malware payload (Mirai)", "value": "1da582d66fe33592ea622f571fd3ce3c68d1a2df41c6185a117a49959a14b6c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771338479, "uuid": "eeb80253-f34c-4064-81d5-e85fe0439db5", "value": "T1D4C2C0BC931390EEC44DC0F69BD807112EE04F84EA83FD6614C9D5C3996969E7AA39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771338479, "uuid": "fad0a67b-286b-4ace-b689-406e68f235ec", "value": "384:4EYRAoRVMCPsHEuhlyllkvGXZHM6QakJODF/1jfx94oSKGS3NJgGlzDpH7uNj1JC:nYRbVVP7HzF1x946JgGlzDpbuR1JGR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771338479, "uuid": "22fe994e-b7b7-47f8-a2f6-542c6ee8188c", "value": 26748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771338479, "uuid": "57db1c75-472d-49a6-a05f-af67e2563e59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9453014-0c16-11f1-8369-82aee05be84a", "comment": "Malware payload (PhantomStealer)", "timestamp": 1771342689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342689, "uuid": "bfc1e44a-462d-4131-976d-c00eedd26b5f", "comment": "Malware payload (PhantomStealer)", "value": "3d390c7f27a220554d293acc8c5da6a1", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342689, "uuid": "15dbff1e-e70c-4361-ada1-b85a209e62ff", "comment": "Malware payload (PhantomStealer)", "value": "66f9f54a8f0ec28288f1ecf388b8b692f0a4aa427c9a664832e91adaf5b0690a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342689, "uuid": "b078f085-8d3d-4cd2-a537-52a8a4f32307", "value": "T1CAF52310EE582CA543ECA529B4CEBD141AE08BA70C45B4953FDC588E0F2F69F81779", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342689, "uuid": "abbafde8-b067-4880-b837-be481adbd457", "value": "49152:sKNcoVrAZEA4Sw7gqQ/PNyflh/TKhc820UPLyqtyr6Tn8Lc9/:R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342689, "uuid": "8ae8792b-a478-4abd-a151-e763f9dc2b1e", "value": 3521069, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342689, "uuid": "927c532b-8783-4733-92b7-358dd871ffca", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "144c080f-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771342868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342868, "uuid": "b7d083cd-12ba-4012-af42-3072df83522a", "comment": "Malware payload", "value": "be3a26ba42c8a62ffcce1e17a815fa80", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342868, "uuid": "6cc43663-9457-40d9-9974-7154597e8c0f", "comment": "Malware payload", "value": "2e793e1a557e56bd45026a6c763c7d63f43582227320db04d561ae0cb34bed5f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342868, "uuid": "cfa37cd6-c2d7-410f-a4bf-6c617370094a", "value": "T1A5452360DE5B4D10973400A160FC9E192AD107A78D88B997BF8DA1CE8F7E74F94781", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342868, "uuid": "0bfb410d-ef58-497b-a29c-9c0cae47defe", "value": "24576:jMQ0gwum3QkWzZ+fugiTCyBeNyIzfSb/O/9oG1HPFSStc6QP:YKtksZWi2HpKEo1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342868, "uuid": "9ef0a085-1bcb-47f1-8ab5-3afdb7bd38ee", "value": 1201729, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342868, "uuid": "ccde02a1-852e-4b2a-ba23-8fd4f8b315ea", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "144c21ed-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771342868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342868, "uuid": "ef6df7e4-28b3-48d0-adc4-f6decb163c33", "comment": "Malware payload", "value": "93d88af9487916b874ed3186c9a8a31d", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342868, "uuid": "47af5d94-d0d1-443c-8e78-8b1fd62e48f8", "comment": "Malware payload", "value": "143dc395c381185bab3f4d6dcb3ea06d4c5f35569b994ee5e7176ac2a1510316", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342868, "uuid": "fa0f588c-a308-44fe-9be5-e5998c7acbbf", "value": "T196451290D92ADEA00A1C5061246A1DC769800EA74C88BB297F8F9F8C1F1F61FD5767", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342868, "uuid": "aaa43930-c387-45a2-8a84-af9b17d27f8c", "value": "24576:F14rznXJ3u3u2nNfbU70KneaHsdrkcGmU9gvNsJZ:F1i9ethbDGmCZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342868, "uuid": "9562f2bf-b32b-4abd-8b3a-8c9004aa1182", "value": 1194125, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342868, "uuid": "4be3a625-13df-4e17-8f02-35296e4d9a71", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14774bed-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771342869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342869, "uuid": "fd416b44-29e2-4709-bc16-7b79d8070f95", "comment": "Malware payload", "value": "8c10f5a3bdfefc63dfa85e83b9d767fd", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342869, "uuid": "89fc5124-ee12-4b22-95a9-b054fd4be793", "comment": "Malware payload", "value": "5c926e22a93454151b61b29d99f25576e6c0bbce6d672d4c701556dd5988a0ed", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342869, "uuid": "824b7fa5-916f-40c5-a9bf-878b321151ec", "value": "T15F551201DA25CD91006C911964AA5D9B26000E2B9C58BBB87FAF5F8E1F0F19FE075B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342869, "uuid": "6adf91da-69bf-41f6-9758-09f7ca3648a2", "value": "24576:sH5rgEQ5wzuQwk/jfFdEAuU0QGLKKdSKGsBHtWuhneSA8/6jPGOEiY:Ic5yr7QEEWVpY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342869, "uuid": "5f68ce11-ccce-466f-b227-08c6a2ed2a22", "value": 1366593, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342869, "uuid": "78a76d1f-dd4b-4c2e-afa0-24d72b4d5087", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "149b75bc-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771342869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342869, "uuid": "42a99a35-d857-4411-b145-1e1fd46c7c91", "comment": "Malware payload", "value": "98552ae9602d0ee66bf1aa6b0b4cfc27", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342869, "uuid": "4404c2ba-d8be-4b8d-8825-fedc1be9486c", "comment": "Malware payload", "value": "191aa7026dae4694836406fc000a5b1707dc108ae44b3c011f6d3538e4abd0cc", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342869, "uuid": "e0aca2ab-b037-4412-a62a-c71ec1bfba0b", "value": "T1F5450110D9518D610A2C816924AA4EDA6A408DB34C8837397F9F4F9E4F5F60FD139B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342869, "uuid": "2c5cccc2-d684-4977-a27b-d39b62fba46f", "value": "24576:3e7SF37sLLdHIobHVC/LNug83639ZqMvr5fOlnYpP:3e2WFLqNZqw2lne", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342869, "uuid": "7c3f075b-e840-4df6-aa5f-5ec6a9ed5080", "value": 1196021, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342869, "uuid": "61a5f2f9-d4c9-4c47-b772-3265343f7dcc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15103312-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload (MassLogger)", "timestamp": 1771342870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "8799f03d-07ba-4544-9811-7bcb9e9782c3", "comment": "Malware payload (MassLogger)", "value": "c2940a969fee59c71a03990d95d6b0d4", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "a7638081-40b2-4176-8459-5f77f151093b", "comment": "Malware payload (MassLogger)", "value": "919bc393a56f87e02bce8bbbd097935dfe55dd94d59cf54ffd81de299d6f7ee3", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "8b69aeca-1ee4-4588-8d9c-0cb6ee51afe0", "value": "T1D8351281D84ADCAA0A5C911424692D8725120EA7AC087B65BFDF6F8E0F2F11FC4757", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "0067036b-1157-4467-a75a-60083aa5b33d", "value": "24576:RRqNNVu+wE7GJd0gFRagjL2xSbZdme7FMhHiYqYZn:0NVq/Epxsm7CYtn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342870, "uuid": "6fa95824-85d9-4efa-a53a-592c71f7d946", "value": 1144765, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "14d72def-d9aa-453f-8320-8e6397a2f0b5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "151ded78-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload (MassLogger)", "timestamp": 1771342870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "c03df471-db5b-48f8-a3d4-b6e26f7979ba", "comment": "Malware payload (MassLogger)", "value": "8df6ab0f2688fecc33875e5fdb1e4202", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "9b6130d9-5c8c-4f20-87ca-36fecab96cfb", "comment": "Malware payload (MassLogger)", "value": "35e93a21f8fb25a3f75fdba3833c89372fb1df09620a4aae0d3b5eacc54348c4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "679f69f9-4b3e-4ee0-a20f-e1371d9bc7b3", "value": "T1E0351201CA61EEA5022C821828194E8726510DB79C447BB97F2E4F8DAF5F81FC576B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "32504bdf-d21c-48b6-baf4-04e8eda2ed6b", "value": "24576:o3rCkWoHHf1ENr0xJKYToRsVVvFrPRipIE+qPC:oRWLOtrfipvPC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342870, "uuid": "7e07d560-3d22-4244-9be8-8ac4c5d25adf", "value": 1146649, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "8fada1dd-f467-4bc1-aeb7-edc6fd815645", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "151ee135-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771342870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "18705483-4366-4887-83a7-6ec2452313c6", "comment": "Malware payload", "value": "0253090516c0b462d7cad394b307f8c2", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "6e75dfbc-64df-4141-af21-135cd91367af", "comment": "Malware payload", "value": "8b35a602cf262271e128dc4a29ec82347b1ab5a377fa0b49e7a83bcd5976d720", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "1d842014-debf-497e-903e-c477d1e8ec00", "value": "T194550102D604DE910A6C6115504A9EC2A6510EB75C10B7B27F9E8F4E5F2F60FC2B9B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "5c05a168-226e-402c-981d-e60eb103f6b0", "value": "24576:bawKG0YwbqzUG0rrrpEd4SYBYLA4Am7HoEtk4iKFmD1oTMNq8ssNLmfLg+O9S:GXPmYVrl8YOI2c15S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342870, "uuid": "0e127cfb-10c2-4706-bfda-9eb390dd2bc5", "value": 1367533, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "14d76e86-b127-4b5b-a5e3-14f28b70e774", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15242bc3-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload (MassLogger)", "timestamp": 1771342870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "b6fabc53-1e63-4cea-af26-c8ed1be1f6cb", "comment": "Malware payload (MassLogger)", "value": "0e51328f0a3eb4ca341bfd00955803be", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "adad404c-3e88-40ab-8a25-158e5ff53d40", "comment": "Malware payload (MassLogger)", "value": "598ad00b874c11c1a9d95f9636c2781768ab312c56f96c2ebf16657a8e2c8d3e", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "1456e1ab-39d5-4f4f-84e4-7055ee83ad79", "value": "T1A8450120E866CD64091C912A24668DC316818E6B9C887BB97F4F9F9E4F1F10F84757", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "74c753ae-c668-4693-958c-03431f55e2ac", "value": "24576:Md5U9ep/gW2irseAynK8SYfQDQKN3PyFsJBe+WPEhxFB8:Md5P2icy1zKhyFaQVx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342870, "uuid": "a6aac2f7-b2e4-4eec-8033-a05b0e3b42de", "value": 1192217, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "77a0370b-ab78-46d8-9b3b-fb9601994267", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1526e4b5-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771342870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "7e423f65-6e3e-4599-8814-b9b75de829b6", "comment": "Malware payload", "value": "93190b7b3f6bee85eac5a8f0286cb90d", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "8b336ea0-9bb6-49ff-a805-d6fb919b8ac8", "comment": "Malware payload", "value": "913c3cd8ea89f18055f6c83341936078db76472f8297708e5a0bbf147823a388", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "b1c60973-48fb-4089-979b-e438ee8dda75", "value": "T18C451211C94ACD29826C8125242A6CCB5A804E735C54BBA67FAF4B8D1F1F64FC5723", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "a33ac15c-641d-462a-aab8-1bc7c0110fa3", "value": "24576:W1Juf+1A7pQeyaNsdi/T8/Etcv294Kt1qA8ZRSDOyO:Wu2qKV/5Q1CSSd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342870, "uuid": "40591070-0f21-4add-8ecc-4105c5def7da", "value": 1196653, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "a4b97f5e-9d5a-4c9d-8837-53c6dfbbeeef", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "152d273c-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771342870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "f724c21e-c01b-43ff-94fa-87277d09ccbe", "comment": "Malware payload", "value": "ff285e02d5508dc0571cf376cdef2582", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "817d5034-79f8-4645-a8f2-bfb52778d45c", "comment": "Malware payload", "value": "007bf56490dc2b0873970b6f5589b2036080eb4a62834d81ad110fe7427d312a", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "7f7d6ea5-c4b0-4391-a41d-043ff26a9cd6", "value": "T1DB550121CA45CD20162C826564A65EDB29240E774C54BBA93FAF0B8E1F4F29FC4727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "b980cb67-f721-46f9-acf0-46a3fe483992", "value": "24576:IQxZjFc7AgVmsUqiazzl1ul2qfCGVe7EpwYjgJuKv4f0NSbS:/jFg/rqvzKYjZfmS2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342870, "uuid": "0e0da6c7-1454-4aa2-b220-5c69a438873c", "value": 1367553, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "ccbc8c05-99b1-4560-b640-640887aa7d02", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15305e4c-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload (MassLogger)", "timestamp": 1771342870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "7385470e-9362-4030-b783-9bad18540345", "comment": "Malware payload (MassLogger)", "value": "7053e598d1329f67b3590f91a5fd7543", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "c3cef879-21c8-4dd1-920d-7b9fc756e512", "comment": "Malware payload (MassLogger)", "value": "9cc9c0a860292684cfdd6daab6155e30b064efc4fe18d7871240d7c2f24da932", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "3e04b54f-572c-4e3d-b7dd-3cbc661cfb4e", "value": "T112451210C9A4CD2A461C926524AA19D766520EB34C84B7A47F4F6F8E4F0F90FC47A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "d50e65ba-2149-4e6e-aa9d-9675c98a9e38", "value": "24576:cFbT8dX6ajcfUiczX2Yvi21XZvfHOwoGBI5kh8:yQlGh2jDoGcD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342870, "uuid": "1ecaba57-dfa6-4305-a4e8-4348eadae4e3", "value": 1190333, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "dc0cc77e-df58-414c-bfd3-d0b5acd979be", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15661c5d-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771342870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "78be908e-fd7f-4757-b395-7751d47f801a", "comment": "Malware payload", "value": "77d45f859fe355b13e84f59f698fdb6f", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "802e5ffe-0111-4288-a632-f85ec33ad68d", "comment": "Malware payload", "value": "81278323333366c9177d761e8bf94c4664d06447198af84cb45f0fa5796e523f", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "eae58b94-e2c2-470f-b5d2-46d896c876d2", "value": "T12A451221C952CCA6056C5019289A4E9B99500DBB0C10BB2A3F9F8F4D1F5FA4FD9763", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "0193982d-04be-427f-be73-e0a7ffa36080", "value": "24576:wZE3SY168dmRVJ1ISSFytUidNBb1IdRwtiplsQJPK52GmawFEJ:wm3SYo3jkidzSdatQxY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342870, "uuid": "df597f40-0180-4da0-be5c-5e2613bbfffe", "value": 1194785, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342870, "uuid": "efec7000-6e89-4329-91b6-eb3f5ea2e8ca", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "368cdc7b-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload (MassLogger)", "timestamp": 1771342926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342926, "uuid": "57e0c599-3b4d-4465-a403-c2d29fb7cd78", "comment": "Malware payload (MassLogger)", "value": "656db17f4e4a5bf99a19c549b491dd58", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342926, "uuid": "4cd03c5d-82f8-4e05-8631-1338135ac327", "comment": "Malware payload (MassLogger)", "value": "0025a111cca898ea9927a50cbd98a1247e970e54cc33d1d9a2e83322c26f65d5", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342926, "uuid": "5e652ca4-ad7f-4a29-a057-376aa2700033", "value": "T1D4452321CE169D615568653520FBFE0998A082838E02FC5A7FCDA5DE1F6E78F41334", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342926, "uuid": "dffac3ff-c172-4fb1-9835-a84a0fbab14a", "value": "24576:VDtF13bDHn3+w31MX7favQ7oU3l7z1zX9Sf7rr9FA0wjzKZcNg:T3ZkfoU3l7z7ARQng", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342926, "uuid": "226b8015-1d41-47d6-a9f2-dbb992cdc69c", "value": 1198945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342926, "uuid": "1b11a72b-3b1e-43ac-8ebe-1f3133728d6f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36946f50-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771342926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342926, "uuid": "8a26575f-0d30-4742-813f-eba61dde423d", "comment": "Malware payload", "value": "c9debc37938dd4c7731b0de839c8bd08", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342926, "uuid": "054e93d0-957e-47d4-9ed7-00f2a53a9da3", "comment": "Malware payload", "value": "588d349625e246ab2fb2c991a898220befc3891d9f9848783519d87cdfd82e7d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342926, "uuid": "b8a8813b-7993-4759-9111-5c53d2ce36b1", "value": "T1874523A1FEAD6D140B95E2266095AD049AA50B4B1C4CB58F3F8C38DE0F1F6CF84765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342926, "uuid": "60128b94-c388-4528-93cb-cc4ce816d4c3", "value": "24576:hPqoHrFARERreXnWkyk4AyYcYwUvcTqrxCN7:ZqU9sy3AmYXeP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342926, "uuid": "881929e4-851d-4d37-88b3-4faf3d89c2fb", "value": 1197105, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342926, "uuid": "45c3f9a5-5aa2-4788-b390-7be6eb95bcba", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "369cdd13-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771342926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342926, "uuid": "799b31be-8ca6-4e8a-9cef-cfd42f008094", "comment": "Malware payload", "value": "f311f8b05fe76d3c9ea1d7ea6235dbeb", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342926, "uuid": "bedf8e1c-7d47-4344-be55-5e0d6ea15c9f", "comment": "Malware payload", "value": "2b323a2bd8c679142cb540673f8539509c547cc3ee4c5a1ced3b655d3da1e8e4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342926, "uuid": "e4986f71-e858-48db-9886-44dd58e68b8c", "value": "T1E9A51111C81A9E91064C812924AA1DCB26400EBB4C8977697F9F5F8E1F9FA4FC4763", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342926, "uuid": "b5757e99-ce6f-4b47-adc2-3aacf9112038", "value": "24576:FYadjKa4OcUkkX3L13hLP1Wuy6UGV7zuQNr6FJ82CKumjaZUY7OARCVxJNCurSbV:xRHrPwNgPtKJuhiCurSaYtlZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342926, "uuid": "a05461ee-1a2b-42c6-8ffe-00c000e56a16", "value": 2245657, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342926, "uuid": "492cbd88-89a7-4dfe-a28f-ecf1b12a5d2a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f46dcefc-0b36-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771342967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342967, "uuid": "40a6a63f-7913-43d7-bf93-e0a07c9fac0f", "comment": "Malware payload (Mirai)", "value": "eb10b90466afd2ff60d3c4999c85e629", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342967, "uuid": "059e214f-8abb-4ab8-8880-c253dd297fc0", "comment": "Malware payload (Mirai)", "value": "c73c4346f62573bc8eea16c12e3b3dd57d7f5d08d9f61bea278c08fe819709fa", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342967, "uuid": "33bc2c7a-5aa8-4d24-acbd-07ce59dfcb24", "value": "T134B35BC6B001DC7DF84FCAB644A35A0ABA30E3510AC31B66735BFD63AC721E54926F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342967, "uuid": "50cce500-d434-4ebe-9e63-44f466d0805e", "value": "3072:Lxqj+WD+wgG6i7uXqwiWdHj72ae8dV00G/:UiA+zGxh8HH2QV00G/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342967, "uuid": "6eede919-02a3-4755-a83c-bd293a159b16", "value": 111072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342967, "uuid": "077c3d8c-b3d3-45af-af2e-34727553b089", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5adc4c99-0c17-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771342987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342987, "uuid": "7246ad77-f448-4a41-8108-b6003196298b", "comment": "Malware payload", "value": "e79134aa050912ff3fcadf1e8d085e26", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342987, "uuid": "1659bc34-2cce-47b5-9048-7befa7140bcb", "comment": "Malware payload", "value": "4ff9a8edb0cf0607d4b7dda1b69962fc973dab08d6fe601ad15eb247d6529d7d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342987, "uuid": "589a8359-1eb6-4572-9a64-d131c40fb868", "value": "T153652350DE584D684B2C701668EA9A0216B00B539E447AD63F9E94CECF2FB5F40778", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342987, "uuid": "193947d6-80f8-4904-8624-5363b224fe0b", "value": "24576:2otTMQSq7b7TJyEYGh9XMB0ZpxIibLZ4OKX10Uyhjoypn1AtsNYMLh:2oJXjoip5jhjdpn2m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771342987, "uuid": "67a16128-f177-469a-a9fe-c7f1a453ad73", "value": 1500377, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342987, "uuid": "0d2d4d9b-898b-4658-8379-8c616b369635", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1de93461-0c1c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771345032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771345032, "uuid": "0c79374b-29e4-4746-97e4-40b38cfdbec1", "comment": "Malware payload", "value": "e270a95db778e862511d8aca7d5770db", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771345032, "uuid": "ac53d95d-214c-4e33-b262-5c747910cc53", "comment": "Malware payload", "value": "aaab84e2cf17ee57fde1ced3f82b45bb9583ea8079957d28ec1a10501d8e4927", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771345032, "uuid": "6c860e35-3559-4e1c-8c95-528941bae3f3", "value": "T186F63394A3E448E9E967683E4D619012F3F1F8210791DACF07D44B6B2F6B6E99D3D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771345032, "uuid": "d0591aad-4981-4786-86a9-c8c5f0a90820", "value": "83bb95991fa411f18103e54ee95f06ec", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771345032, "uuid": "7868f842-2ccf-42c0-9f68-1b08f7838815", "value": "393216:TVuEmNGYN1bPsZg2KeiCxK4BHsFhktlapPLbYYYH4a7o:xS/N1ILX3JtUpTbLYH4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771345032, "uuid": "26241bf5-0028-4962-9a0d-27118b5ac763", "value": 15660544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771345032, "uuid": "1ff2c2ba-2caf-4e52-936d-293162172c27", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e00a13c-0c1c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771345086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771345086, "uuid": "66cdb43e-af78-4f36-90ac-d81976217c4d", "comment": "Malware payload", "value": "1b4c46c0c40463cb4af341304345ab10", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771345086, "uuid": "cd589c3b-c4b9-425e-a06f-19b4db9a4e88", "comment": "Malware payload", "value": "6c0c480e6182d5aa36385f8956489fd0fb9821045953751e0b861252daa93521", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771345086, "uuid": "c9e979ed-b6b0-4d5a-a971-230c449e2ad8", "value": "T13024239DA39E54A5C66820F8AB963E809407B23712893FBCCEB05C7C435F805747AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771345086, "uuid": "0b4882d4-8c33-4ed2-9b2c-41bf40088aaf", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771345086, "uuid": "1138daf9-7cda-4f74-bba3-9e8d01ec8963", "value": "6144:lS8bUZjtgn5V0tCAveK8yuC/EsIrBX/S33A5V9nHwdr/:088jtgnIwAQPQIrBX/S33A5V1Hi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771345086, "uuid": "c07d15e3-30d8-4cc2-b053-950c6058e0e9", "value": 223744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771345086, "uuid": "161852b3-5ef5-4aa5-85f5-9091250b4427", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c88c709-0c20-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771346828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771346828, "uuid": "0d396d69-abcd-4344-9722-82f04aa7a89b", "comment": "Malware payload (Mirai)", "value": "1a999c725f7e317160dc47249dd856db", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771346828, "uuid": "1a32c26c-c038-4d08-8085-5b8c07361f56", "comment": "Malware payload (Mirai)", "value": "2f2d721db46d14fb8d759b8b6f49c28b44586ba89063085528f57fb618783e0e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771346828, "uuid": "d436f990-0aba-4afe-8982-5aa29ee44f76", "value": "T1434194CA279174756CAAA963F3B906187580A8C516F86E445BFC78F4C48CD24FDD4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771346828, "uuid": "65e00c38-c773-4d5e-ad0e-c6aab783c36a", "value": "24:v0n6yd/sF/sc/s0kTld/sGKM/sPG/sn/sgJHZ/sp/sUKlh/sY/sk/sePeH:v0nVGur0kxGG0PR0gHKaUKc/zf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771346828, "uuid": "8156ac8d-63eb-481a-835c-86d90ab2c87d", "value": 2002, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771346828, "uuid": "934aa418-47e0-49d9-b94a-bd43dff6e52b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c9b6f7b-0c20-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771346828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771346828, "uuid": "68f03e10-c7cf-4199-8dbc-7b64c193ad6b", "comment": "Malware payload (Mirai)", "value": "013b5c4eb47fa84b02185a60ffd76479", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771346828, "uuid": "ce25adc0-00a4-4349-a7f3-f92b015c9f1f", "comment": "Malware payload (Mirai)", "value": "2035949a25341757ec979bf241ec3fd33d4afb4f1ed8022b96910fe949fb36af", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771346828, "uuid": "dc8fffe0-2ddc-443a-a736-7a2d5413ec03", "value": "T16B637EC9E283D8F6FC1705706036E73BAE71E0AA211CE686C778D5B1FC86941A117A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771346828, "uuid": "39b307f6-bf0d-434c-bc6f-2db451eaa818", "value": "1536:pnUQJZdRlDAXO6QyQwOaOAmjxjhp3uJ7RvsuIr5bhG8V:pnUQJ7RlUXTQpwOaOAWxjL3q+uWnV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771346828, "uuid": "cded57e8-7da4-4538-8956-ace40e68ee61", "value": 70736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771346828, "uuid": "74d9e044-ff42-4cce-93f5-33f26b39d962", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ca6aaf5-0c20-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771347015, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347015, "uuid": "c9917fc9-0cfe-444e-8e2c-d6d242836efe", "comment": "Malware payload (Mirai)", "value": "46fa8bc601cbc393b1d410273e635475", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347015, "uuid": "ea19cc49-05f7-42df-9415-201e8a02d1a4", "comment": "Malware payload (Mirai)", "value": "d34e24978219766bb965326f67424074983406ccca35fb54a17f50fbe04b7945", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347015, "uuid": "b09930aa-5523-46c1-9320-cb718a4de60c", "value": "T1DC632A21BA761E1BC4C1947621F74B25B2F143CA26ECCA0A3DB20D9EFF71A446543A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347015, "uuid": "aacef97c-e480-4221-9722-fe353fa1c306", "value": "1536:lGBVg7AOotXhGIAsQXt3AvQAQm75YH/tat0V:lSCzxBwQmVNaV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347015, "uuid": "a18a9453-aceb-4131-aa00-f1c22cf97ffc", "value": 67312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347015, "uuid": "d3a5f76b-2237-43b5-acba-5a024ed3b515", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d29a5d16-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771347912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347912, "uuid": "334db6e0-d05e-41f2-99f7-d11df866f7b4", "comment": "Malware payload", "value": "82b44600367e23f2554de4a2d5d7709a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347912, "uuid": "2e57bc97-7922-40ae-ba4b-b780a1e343d6", "comment": "Malware payload", "value": "5072556c254ee9e46e00da8a2ece41f12f23e612b101e8c6f19c5ab8d70b4c9c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347912, "uuid": "51a9e7e1-75ed-40ba-af84-cc1b1bf5ef97", "value": "T155012DCE2B94B1554C4C9D40F16A862C7944ABD031B40E9D6B9CB4B2A9CCD28F9A5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347912, "uuid": "d4ada581-41fc-4524-8d7e-94b687d150ca", "value": "12:U1eLqU0cjU0iNIl5zAU0P0LKjU0uOsU0iCU0c/U06cSEU0otaKAU0K/iAU0KtfAy:D7xglNI75tKgtixDT8LcEhtBlb/abh9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347912, "uuid": "40d9f212-c131-45b7-b716-4aeead6b9552", "value": 797, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347912, "uuid": "c14739f9-dcd9-418c-a551-d29ef3a46b7c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d29b74fc-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771347912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347912, "uuid": "422d3fef-362e-44fe-a0d8-e8d4e91f70f6", "comment": "Malware payload (Mirai)", "value": "f07c2c387918ed608d48cbca00dd4f6c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347912, "uuid": "e87617b1-143d-40ca-9d50-5fb4d74e02fb", "comment": "Malware payload (Mirai)", "value": "dfd32dc90daa92d9a5b31bb1d6bbe0f5c85803229d3e1a2f71534a3a07fc090e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347912, "uuid": "3bbd5418-f950-4fcb-9e3c-1a2d0b4b6965", "value": "T1BE011E8D2BE4B1879E0C9E08F16A821C7940A6C072B40D55F364B870D8DD210FCA8F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347912, "uuid": "194c7737-39ac-41a8-a211-0059633d0787", "value": "12:3J3X1eLqQXcjQXiNIl5zAQXP0LKjQXuOsQXiCQXc/QX6cSEQXotaKAQXK/iAQXKK:3J3qaZNI7WKRT2bcZtBq/dhA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347912, "uuid": "bdb9d4a7-929e-4db3-9925-adca4e21e6a5", "value": 707, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347912, "uuid": "50a5adad-c496-4ad9-be52-1086730982fb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2a558b0-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771347912, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347912, "uuid": "21e20458-5019-42ef-8680-931c6f4d94d8", "comment": "Malware payload", "value": "7c0c80a7be710cd9d70233d0e9f27ebb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347912, "uuid": "b26fd111-2e52-4514-af7d-e7e62945d3b1", "comment": "Malware payload", "value": "8e5263851b1c747f12605cc88eb2475bf0c670bda7ecefbfd9ec8947316df67d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347912, "uuid": "a7319404-cae6-41e2-9c90-9dc17f928c02", "value": "T11501E1CF2BA1F1458E0CAE10F16A06597945E7C032B45F59ABD47872D8DDA10FCE8F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347912, "uuid": "6431389b-b7ab-4833-8e9e-d882f06c8fd9", "value": "12:u1eLq/cj/iNIl5zA/P0LKj/uOs/iC/c//6cSE/otaKA/K/iA/KtfAn:lbmNI7dKS0R6cAtB//MhA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347912, "uuid": "abec6263-691e-4175-aea2-77efe3396946", "value": 707, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347912, "uuid": "a45567b2-d7b2-4229-95c4-99b0a47e65e5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e0f0c71-e2a8-11f0-9c99-82aee05be84a", "comment": "Malware payload", "timestamp": 1771347916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347916, "uuid": "d9799b2b-f27f-4c9a-9386-c43cf46d91d3", "comment": "Malware payload", "value": "581b131e053fb3a4b962b7de8580fb3c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347916, "uuid": "f0e80e26-bf7d-4d98-b54a-47f8c5ec433b", "comment": "Malware payload", "value": "c9a24af41f90ad639856a76b66c833f2ed8e43e44a4a306a205ab4161f107066", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347916, "uuid": "b7ad4b6e-2ff9-45bd-8451-b00c39819173", "value": "T1D8319CC9128144B1ADE6DD2671A5C884B080B0977CCA6E0AD8E83DF9C89DF08B861B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347916, "uuid": "e8beb4f8-7a5d-4e9a-9d84-141e9bfcf21a", "value": "48:vpAIRpPARp/OeRpiUpRpB8RpYfGRpHcRp7URpWyRp/ce:vr4/Hi1AcDb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347916, "uuid": "5838d804-96cd-4a11-8e79-b55dce575bf3", "value": 1783, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347916, "uuid": "c8169d96-3a8a-430f-9ef6-afb28c266566", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6c1c711-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771347919, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347919, "uuid": "8e140f64-c619-4fbb-b776-8933159ba2c3", "comment": "Malware payload (Mirai)", "value": "02f2a2eff467ec44993fb88edb1817be", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347919, "uuid": "da7e43d0-74a2-4f64-8bb6-9549890d54da", "comment": "Malware payload (Mirai)", "value": "959e09c055b674f9aad3ce391cd01564c39477dcc329f62ef8f64ab79de12212", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347919, "uuid": "4473b35b-360d-4b40-b65a-9a028b71fb8e", "value": "T103F2E175D1D46010C8E1C033E83DC541661A08B4D7A3AA6277869F7DB5E2488EF3F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347919, "uuid": "1f543628-e979-4c2d-aec9-0240b60ed23a", "value": "768:M+QNAu1VmS5o5ASksTl5ld+PBpGAEy9I1o2DjaLH8RbEfht1yZbdKEMHP3UU:2N7nmqo5usproPT3JIKLMbEJnWq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347919, "uuid": "6808420b-3671-4397-a854-7280898471d6", "value": 34684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347919, "uuid": "505789ed-bc91-40d0-b190-595cce86e4cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6fb1446-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771347920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347920, "uuid": "560eb2a2-eb35-4ef1-9d4e-5dd872fad20b", "comment": "Malware payload (Mirai)", "value": "a4663b299b55cc24b0d7c4f23cda6ddd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347920, "uuid": "caef3dc7-2962-406b-b575-bcb8918cea22", "comment": "Malware payload (Mirai)", "value": "24c100953ff3fabae89d69b23f8223aaa122f3bee85505be9ca7b0f3d960e394", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347920, "uuid": "c934617b-8c25-4e70-bf41-5221d62b4898", "value": "T10A736B32B9751D27C4D4A87A61F30721F2F2479A25AC8A1E3DB10D4EBF35A5032537", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347920, "uuid": "147c3898-a8f6-4e67-897e-9be1b521e1ac", "value": "1536:/kjnSCObFJmCGSJRN0Y0TQPtkYiNM5GTzgnsvt78/XI:s2c6jIuCzN8caI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347920, "uuid": "e05cc202-dd6b-45c6-8c49-7340fb887998", "value": 75720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347920, "uuid": "5e564f96-7598-4857-8d38-f0c4be21a704", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5e96a2b-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771347971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347971, "uuid": "4fbfd24b-ff75-48ce-a771-7503b46267c1", "comment": "Malware payload", "value": "fb069c04329d34c178e9b286ef844732", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347971, "uuid": "980ff734-909f-470e-a3c6-9f139d62e182", "comment": "Malware payload", "value": "03bf8b6610e81d015f5e0e6023281b232b8d32e8510cef333f9f9eb8af1b4bde", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347971, "uuid": "a6c41ee7-1768-4d3e-bae3-3f31b10d7b8d", "value": "T14421F4EE589588F2010DCE6AFA71D75850CC8BEFB85B2F42D9D8ACF19E91D05B034B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347971, "uuid": "18624a2c-8a82-4470-9ee6-915e4dd88cd5", "value": "24:TAl2atCr2Qdgyufm1B4ZNO47ONnfWkMznYFf410+3EC404KtSdSd:TA8atcfdgzfmf4ZE47an+FznYFf410+3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347971, "uuid": "10df7d1e-23ca-4d5c-b426-0c82d0d9686c", "value": 1433, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347971, "uuid": "638c3362-4ada-4db1-96e7-919e40ab4199", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5eb4908-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771347971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347971, "uuid": "cea7501e-93ab-42f6-8215-0ec373601301", "comment": "Malware payload (Mirai)", "value": "6b80f8343aca910469d7154f9265f353", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347971, "uuid": "c64bddd4-c2e9-4c40-8a5c-5292b54c4869", "comment": "Malware payload (Mirai)", "value": "4f46e14d2fa3a969092d82695ff2795bb0da86abfa28415c66df9c41336dc16f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347971, "uuid": "ca2641e4-5a22-4ad9-822e-1f3dfb809f21", "value": "T10DD4BF41730D3EB6E376743E80920B266F18AF4095832F6761F4B61A69B35AB1F3C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347971, "uuid": "89b08f28-1a7d-47d5-8d28-0f85d0db7264", "value": "12288:ID8ViqXUnGXbOkyUr1IgKKN+TE0EhVHHYjB1KX:VVT1kQgTUVHHYKX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347971, "uuid": "717f8151-f4ab-4c65-bd6b-6ae20aec4fcd", "value": 600076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347971, "uuid": "71f7da76-0ab5-4423-a2ee-59d804863aaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5fbdb59-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771347972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "4bab2c0e-0dd6-44a8-867b-6c203f50d9f4", "comment": "Malware payload (Mirai)", "value": "4c29711b1a76e8980e9dce33ffdc652d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "c54dd969-beb0-4b14-83f5-66854bd1a171", "comment": "Malware payload (Mirai)", "value": "178523497408fa176e1ddcbe51cf8a44f6303ea147bbbdcafb4f0c88dad3b97c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "25b4eb0d-8f85-463b-a727-db9e43d23884", "value": "T187F47C46EF850FEBC4AFCD30452E834705ED999706C1A63861FC4D8CBA9D6A94FD35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "4521cdfd-7b54-40fc-a64b-1608966e2055", "value": "12288:A1b1gSF8F0DZp5D7M0Gkvz/eV+44KAjrJQMbj4YmlqCb5XjHUW5MNjVRnxJLKQFM:3vW4RTuhj0D5sfk3o6PdPIDX+gKq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347972, "uuid": "7101ac84-3336-40f5-8abb-c3f761afa1f0", "value": 729928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "0a6e09e6-025e-4308-8edc-cba070f7b4a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5fc953b-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771347972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "a865ed11-aec6-4cc0-a3a4-fd3986d261b1", "comment": "Malware payload (Mirai)", "value": "42beef63239b3c7e91a139b180f06dae", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "a910fb0c-d0dc-44c4-bb94-133fa4f0a237", "comment": "Malware payload (Mirai)", "value": "7d30f8f3ca466a1030c6d2ceb309df54ac2576601c93955ab26a75100f29d0f7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "38a08e60-8cc6-4f59-9c5c-4339d69fc766", "value": "T133C4CF93F6705ED5C01D4AB454BED2308B89E29713877581F6FE82002C6B56ABF9FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "17236c09-1a23-4a37-9b15-e86c020dd3a6", "value": "12288:GmqG3UsALedu3sB9quj1xLpm121VYoLRk3QpIztso:8YYLeQeqAlKoe6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347972, "uuid": "b5bc4952-713d-4d11-bdf7-b5462516b2ea", "value": 594600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "3c25c647-3344-4890-9d87-f124254600f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f60dec27-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771347972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "e989e2d3-66ad-4ace-b7d7-358a53c6c7c2", "comment": "Malware payload (Mirai)", "value": "627ec9f1c616669513ead462d8a83bd7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "39401abc-14a8-4c3f-ac6e-d03cd2cbee17", "comment": "Malware payload (Mirai)", "value": "32010a8966f216bbc585ddfa46ce81e12c986aa330433e5ef1d4c22bf939761e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "844746e3-6cf8-4c74-bb12-09f4202535c9", "value": "T139158D2AB2B3F57CE00BC03457DBCAA25535F07522212DBB26C4DA353D6ADE11369B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "d5cac708-43d8-4892-97f9-cc2e1d81790f", "value": "12288:SF6kwxNggj4PYrdvHYX+73+SPmh/U1OTVWa3yObfaLqoqWcayUH+cd3HX:Q67xNggMPCNElZt3yGaM2+0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347972, "uuid": "0580f1d5-72c5-4b4d-a6aa-bd44b80daf02", "value": 957256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "f5577fc2-cbb6-428f-9e01-d28f94a8268f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f60e6a2a-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771347972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "9a22ade8-c604-410e-a060-1b6b38ae0fab", "comment": "Malware payload (Mirai)", "value": "d5a46ca0448a98da9020870aa3a61602", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "0f700668-5a19-46ae-842a-6cb5eb93c75f", "comment": "Malware payload (Mirai)", "value": "ac6f9327d6e97815e6dbe493d6b23d6d6d4a776fd21426871b7e5a8effbb6a30", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "a964e577-d5a4-493d-be38-a1f7345622a0", "value": "T1D825AE11BBF2052AE280933586A2D750B613DB9668D5030BCF618EEBEF571750F85C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "ce05e83e-c2b9-4c11-aaf9-39cff442b193", "value": "12288:eAu75hPWGAOxh86/Yu+AAqq8DPy6KNrraYn30wUQAbdHw5nZ95Z6:eFFhOhOj/xpqSdKN53H8Jgt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347972, "uuid": "58870ae3-3eff-4bdc-95eb-349df26e568c", "value": 1057224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "1d14a723-8689-43e6-92fc-8692e4fd6ecd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f60e86f3-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771347972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "8a58b66e-8dff-4108-9c78-ae9e213717b2", "comment": "Malware payload (Mirai)", "value": "d9501c59308abc0b34444b78065bc640", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "aaacf2a1-d6f6-4d56-983e-f2a1f053ed24", "comment": "Malware payload (Mirai)", "value": "440f3b1c953e07c851537c7d6871910e51d4deecf34b4a56ba9d19c0de39dfdd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "b512b562-b517-4b36-983e-b677c4b6cf84", "value": "T16494E149F64B3D42D9D7E535048AC681075EE4AB33F393092B47A4BB38693B24F293", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "e0349d6e-38f4-432d-ae6d-5ce0f832a4dd", "value": "12288:n/H/ypxZaVtJc3ohj0J9U4CnWgp+4tz+:HyxZa630j0JwV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347972, "uuid": "154abaeb-6a87-43fe-bedd-6b0bc0985b6e", "value": 443872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "74f7bfc8-8194-4793-8779-d8beea0dcc19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f60ec204-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771347972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "d104090c-6293-4b85-b2fd-210ee9f538b3", "comment": "Malware payload (Mirai)", "value": "c0913d25e0572196ac59cf31885143ed", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "ea03c622-0031-4ecc-8bf7-5a4159fa0030", "comment": "Malware payload (Mirai)", "value": "1accbbb3ae1c73bf4d671715c43d13b0a7281af03e00243675456bba6029aafb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "a8399d2a-1591-4f4d-9aef-e22d1a205a36", "value": "T172357F52FF082527DE090AF066FB2774F752246381F4D1323B042FAB586267998E7D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "d288a945-0069-4295-990f-1215c74ffd0c", "value": "24576:OSTMu0ymJkK22BBP/5+TELntZX5J38ZawsFCzsgpu6:OSTMu0ymJkK2wBP/5+TELntZpJ38ZTRx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347972, "uuid": "26332afa-ba37-43d9-b3e9-66eafd30d53b", "value": 1122936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "f9c992b4-272a-4a35-8f73-b1a9f4456122", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f60eefb2-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771347972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "d86a7128-a657-4ca4-b1c7-1100bf3b858c", "comment": "Malware payload (Mirai)", "value": "8f2c0d32fc7f5024dace9d00c9531ca4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "5ae307e8-08bd-43c0-9b07-fd2abf7ef334", "comment": "Malware payload (Mirai)", "value": "2ce4aebebfedf724061a123cba6430613878630f418d7a7e544d8e5717caecaa", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "2f3bb28e-0bf2-4993-b8b6-52b00524e2c6", "value": "T1DCF46C6377218F64E365D67005F387119E9521A30EF290C6A2BCD2207E6066D6E6FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "6abad0ff-acbd-4c81-8c3f-f0c33a3cb656", "value": "12288:bpEPKmln4Dzrs61rwSWnWv48nGNmzzuf0eXbt0gp9kMToBid3:NwKm569Z48nG0uFXbtEeoE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347972, "uuid": "ab0dbd11-a104-44a2-84ee-282c01852804", "value": 729928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "cd87f732-5c73-4f8f-b83f-3ff78799ab88", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f60f4158-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771347972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "8e0b87c9-ecbb-469f-9d78-903c9947bdfe", "comment": "Malware payload (Mirai)", "value": "339e78b413f64a3ab4c20db21e09928d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "24b704e8-9522-45e5-930b-a0db916ce538", "comment": "Malware payload (Mirai)", "value": "35aa937385cc4b9d7b85c9ade1f2faf6e51d91bbdff55d8e2c54a9938646cce7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "062926b1-f6b4-488e-be20-0eeaf2c1b88d", "value": "T141156D89EBC794E1F65300F1068FD7F71924A2265053F6F6EB4C2A977432B522E163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "ea114e04-020b-4f42-bfb5-c6828a3832a7", "value": "24576:CAw50kXOhakhPRik3vX90GufsKhtoqNQH/1GQVmkBo7ZMg:S0zhakh3fCJsKDNQwtMg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347972, "uuid": "59958d86-b355-45c6-a65a-8f1a16273bb3", "value": 910428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "87ce803e-8354-411b-976f-259236ed1a3b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f60f4929-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771347972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "8a72d856-227d-43bc-8a87-88bb8aa94db5", "comment": "Malware payload (Mirai)", "value": "ab2d6dcb3089d4eeafcf29039e8d2af4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "3ffaa5b6-7e1a-4f71-a3a1-f6d510738530", "comment": "Malware payload (Mirai)", "value": "2da23c54278f79a046b8a64c90f2adc374e80bd11362121c65b951824f13f084", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "630c08f9-9cb7-494d-ba47-9fa94f174b8a", "value": "T1EAF47D59FE4E3C41E3CBE3789B4E87E1E22FB190D32351623981534D94C6AE9CBB06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "37e0d739-aa01-4733-986b-62844f357d09", "value": "12288:GA8gXcv9wvK7ktrJHbyMYF6auLV5X4Wqv4Bw5lmtKi:hjXrK7UHZy6f5XNTw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347972, "uuid": "ed15b062-6c6f-43e7-8261-d41d7d9daa8c", "value": 729320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "4ac55c0e-046b-41f7-8c70-76524badcd9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6103705-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771347972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "a6f43ada-cd0b-4bc2-9767-8b9195d6f2cb", "comment": "Malware payload (Mirai)", "value": "1142e062689e8c25894fcecc79925bc2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "197fe067-2ff5-4529-9a99-85f98541a4af", "comment": "Malware payload (Mirai)", "value": "6890f0562bf7ccb632787f7d067ee9853b1fea2b891f7a323536c38f245d39e8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "874a8400-e90e-4cc9-976b-97665a050084", "value": "T188D43955F880DFA2C6C12976F65D86A873174B79C3EB720689254B343BE786B0F3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "776bc9df-c5ed-4856-9af6-5e73404d1db7", "value": "12288:cDpY9o4Xztaco6Xtkm+gO92AIVynW+2gpkltah:kY9o4htZ+gK2AIonW7w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771347972, "uuid": "8cff9b2e-072d-4e98-84a2-0f4ece8007f0", "value": 607568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347972, "uuid": "f4021273-86c2-4ae6-8d3e-9f310c69fcd2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18611218-0c23-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771348029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348029, "uuid": "0a26ff4d-a5de-4db8-a411-100b32136fa5", "comment": "Malware payload (Mirai)", "value": "b2b0b9fd2b267cf13d6acc842eba3a72", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348029, "uuid": "45c859ae-816d-4a20-b9b5-e71d0b705a25", "comment": "Malware payload (Mirai)", "value": "97c926525c5a0f58f571c798c6707af18b75b24a8b8ca4065249e4c97ec55516", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348029, "uuid": "5aa73b5f-509e-403b-a89a-d2dbe54f01af", "value": "T113D39DA7B24F2450C82206F45BCB5B9D2A3325019E6B9AE77C5E373F2E735DA18063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348029, "uuid": "23af9f4c-a0dc-48ef-9922-849da9633472", "value": "3072:1UXDvb2IMuo9rhMLo9ira+YgR1YggkC9DFq1D2dq:1UXDvb27nhBi2azYaC9DFqQdq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771348029, "uuid": "92a75eda-1ec2-4827-99c2-0224e0943b56", "value": 132848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348029, "uuid": "1ca02309-9bad-4863-be4a-4d4314b3c9ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1771348150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348150, "uuid": "a4511057-774e-4d36-9d22-09436402d699", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348150, "uuid": "0c47d278-773e-4b66-b6bb-f06a7ed3e628", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348150, "uuid": "b56f6c45-4d15-47b8-b9c1-abb2f59fb199", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348150, "uuid": "46b129f3-d704-44f7-98f5-9260933a7fb1", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771348150, "uuid": "a32521e6-119a-4a1f-b329-f455b56217e8", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348150, "uuid": "d405b3ba-8f15-4559-9770-69326bbd72c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348150, "uuid": "5497a33a-ac3b-44c7-8058-46274ee09a08", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9355158b-66b4-11f0-aadf-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771348152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348152, "uuid": "63dcf093-0bd3-4033-967f-30c3c96f6470", "comment": "Malware payload (Mirai)", "value": "431673c05b3446cb075f991a71fdf899", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ESP", "colour": "#6b3e00", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348152, "uuid": "72077199-a18d-4ad9-ac29-5eb88fc3d65c", "comment": "Malware payload (Mirai)", "value": "f8697afe7e9d066a3502d83d5867923f9b885c15f59eec9eef906edeb7f8bde2", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ESP", "colour": "#6b3e00", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348152, "uuid": "ea060091-2cc9-4a35-ac05-d721bac79122", "value": "T13A533980BC819A13C6D45277FB6E428D732717A8D2EE73139D262F11378B92F0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348152, "uuid": "1d832ea4-022b-4ce0-861f-002182566dad", "value": "768:KV5Pkt1uB6q4AJNaJehL38sJcusXlQ+wCEy/NRFoD0vO0aMllHKJtllwwVVsTvnQ:YPYuB61AJ3820Jphl1oljeTvnP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771348152, "uuid": "220dfee3-6b05-43ef-874a-757283da3c05", "value": 64188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348152, "uuid": "00beeb47-2037-438a-8629-a0870327afdc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1771348161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348161, "uuid": "492da791-1185-4054-bd4e-034266745599", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348161, "uuid": "c81238f6-cb2d-4126-b2e7-36d5dbec9c58", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348161, "uuid": "7a13d8d4-480c-4ee6-93c8-06a559610a18", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348161, "uuid": "6103961a-c3ef-4317-9323-13f7bf53b208", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771348161, "uuid": "8423681f-faab-4352-b480-494534c23545", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348161, "uuid": "8a4b2546-da39-4e1b-b83d-3dd927163e9c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348161, "uuid": "771dee24-2742-4a42-aac3-f67ae87eb5f0", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa7ce9e-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1771348161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348161, "uuid": "890f46ea-8e82-425d-be1e-6d9d802f45e2", "comment": "Malware payload", "value": "df64a5c787f34c5b38c8103a67e3d97c", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348161, "uuid": "dd747784-9985-4382-8393-eaa2a9eb845d", "comment": "Malware payload", "value": "6f1bbcaa6efc41ee257919a85acc9ea5b1f82c8def103e39629e0b5161800ccc", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348161, "uuid": "df227688-114c-49f1-82b5-bcc92e2fe2f0", "value": "T11D356D56F9808EA2C5D8177BB75DC35833234B78D7DEB102CD08672477AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348161, "uuid": "83f78ed2-f46f-44d8-a76b-e5f3c4164617", "value": "12288:sQFoCapOujNJ7h8SYIhU1wwy7zh36bV7CIBolbVtE7ZdXjboyjBNY3v9fQbLv:sQFbJi5Pa/CbmzotVqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771348161, "uuid": "4eea282d-1e05-4a14-b1f7-b6b9d92e67ab", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348161, "uuid": "c543bdf6-26fd-4c45-b974-04fe250cdeae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348161, "uuid": "901f43dc-7acc-4782-a0d7-5ca7e0822c17", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c156fd6-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771349002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349002, "uuid": "c2b14194-3683-41d8-9d54-036e47839651", "comment": "Malware payload", "value": "13efc7629f58643f6b8a18d5b84d2b63", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349002, "uuid": "51dc0e6b-b59d-4263-a46c-8d2dea507c6d", "comment": "Malware payload", "value": "67f597109e003ba1fe22b67e6ecc5fc0cc913655509f6ba7b67ae5579a252d71", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349002, "uuid": "21075623-0c41-4a92-9514-e76068a0e69f", "value": "T156C3D6DDB2E27025439324A5157F410AE27B6E543C4B8294D17EE9D4AC7CE8E807BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349002, "uuid": "c88a785f-10e9-4be1-82b7-f00827445ef6", "value": "1536:5wxqb5bdwL+pBFz9FSUsqLon9NYgetcVPkx2cnYteolbFr3rd6TcWmuZUfFi8AiE:5md+tzoVP9ftrdruZ5QZ3fav8rA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349002, "uuid": "ccad4baf-5b35-40f0-bcbe-074c1d2cd6e7", "value": 120711, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349002, "uuid": "c656f830-8918-48d9-ac9e-da61dd8fb6e5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7824cc1e-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771349049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349049, "uuid": "b4a1680b-95d7-4435-9b6c-76eb27769cc5", "comment": "Malware payload", "value": "8a3c889007b41ba176cba5b3fb61c058", "object_relation": "md5", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349049, "uuid": "228703fa-da9a-47da-9fbf-69417095c40e", "comment": "Malware payload", "value": "7e194ba0193ee43bc6e1c0c56ab9a6517226460eaa5e80cd72e35065ec4da73b", "object_relation": "sha256", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349049, "uuid": "5eb53d99-b28f-44a7-a574-3de613c8388d", "value": "T1CA82A527DE04AFF00D7EB3622597A816CA610211BA3579097A8EC5EC3F32654DFCC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349049, "uuid": "a6462a7c-dc02-4cb6-bc6a-0615316da69e", "value": "192:Kh0rLN8rjgp2cdXOXjMULe6MOd8+/Yvbk8KibnG4ltLYGmkcAJ/m8o4/s/8PkrIn:Ke/mrbc5Oc08u87bdltL7RNOF4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349049, "uuid": "89bb428b-80e2-4ff0-86c4-407f558a61ba", "value": 18907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349049, "uuid": "5b18a8a2-ef53-4c1b-ae92-f8f14e8afb48", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79481d06-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1771349051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349051, "uuid": "58861218-edf6-4f80-b84d-e09949a25959", "comment": "Malware payload (Gafgyt)", "value": "6a13173b67753881561a965e878df532", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349051, "uuid": "d3f7f09d-01ce-4288-b5b5-e4dcc9568558", "comment": "Malware payload (Gafgyt)", "value": "0260e5bed704a0ae0007c4bd1c0d3927f3295e40e63678e419b8ba95308e2679", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349051, "uuid": "fcef35d6-43b0-44ee-8ea8-90948b17db65", "value": "T1961100FA7420B5B13478897D309B08D187C705FEF475635FEC692C65258981E39E8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349051, "uuid": "1051631b-c843-4faa-bbd0-a4d398fda4fc", "value": "12:9US37SWSMXS9NSRwI2SEeScCSt5S9LCS962S927SP2S9K2SErgShUs94SYK:y69/GcwBOMe1V2bB2bgkp94SYK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349051, "uuid": "6c067dd9-9739-4647-9192-7f5f95aebae6", "value": 1106, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349051, "uuid": "1162396d-ef93-4771-ad91-a0dd6f0c1c71", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79653584-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1771349051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349051, "uuid": "00daa4b3-5f63-489c-a9c0-ed6550bd2229", "comment": "Malware payload (Gafgyt)", "value": "50ae0714abfdcf6ad03442ecaf4d2976", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349051, "uuid": "ca76d9e3-cbfc-4d09-8c3e-7cd8d69e4ba2", "comment": "Malware payload (Gafgyt)", "value": "230d69758d672bfd811c2fd81d890c18d1e28ce87c4641f8c2d3033790f00620", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349051, "uuid": "084bcf4b-e4c7-4099-8490-00d36e1335cf", "value": "T163E37D87F606ACA5D9910BF69B8713AC2BB31040AF9FE7E67D0C6A344D916DD5C0BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349051, "uuid": "5d518cb2-74fb-4bac-a710-3202bfd46081", "value": "1536:gSjfbd8F9ZlspLJJ+XZqkGltWY9r2gTOCeZgenp/LWJ+rdsiAURmgTHhLd:tAlspF8pqaY9S4Ug6qwrZAURmgTHhLd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349051, "uuid": "3e1034a1-a3b1-4ab2-a47c-6ab882d62b4c", "value": 152420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349051, "uuid": "eb2bbb74-eb28-46d0-b97f-b175935d9653", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79819646-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771349051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349051, "uuid": "45b2a51a-3c5b-4f1b-8d60-2bef71a5c692", "comment": "Malware payload", "value": "ec9ef719907e883aa8a489e707004801", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349051, "uuid": "ec7f3930-47c4-4d68-a169-84f514e452e2", "comment": "Malware payload", "value": "77cf1e4ab9006a436ba64fe3f78a94f9d7be4e81206e040ff422f64b5da8480f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349051, "uuid": "1d3fa613-f869-418f-b16b-a7381fd92ad9", "value": "T1FED1FE35798A21F430CEC63E79E52101612AB10B75148D38B80FB1291FEE9A577F92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349051, "uuid": "7be3ddef-7ceb-413f-9b8c-b3029be8fbe4", "value": "192:uBW+El9s2JZITE6R/TJauu6AEaM4X83rxV:cWHy/9uqV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349051, "uuid": "57640891-0177-4e93-83a1-7908fca8b462", "value": 6421, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349051, "uuid": "a4fc700e-6e0e-4aef-8e45-24933528d433", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79bf9520-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1771349052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "9df9742f-ff2a-4478-978e-e2b3ca6bbff7", "comment": "Malware payload (Gafgyt)", "value": "b5751ff8810fb16b6abe27d65a4b9d32", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "d0059b58-1f32-4893-9576-2c05e1ad019f", "comment": "Malware payload (Gafgyt)", "value": "472c532b18eef3e6eb9429f7da347d28fc89cb1447c84049cf459201a7d55cd3", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349052, "uuid": "48f42d64-eaaa-4d52-9163-5ffbe4242c16", "value": "T12CF33B04EA804B57C5E227B9F68B424D33239B64A3DB33155938EFF43FC2B995E265", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349052, "uuid": "082e000c-0029-48c6-bef0-8cd00ccbbd9b", "value": "3072:4dX8JtadqhjT2H6wugMcrSaXnpQEM/9yMZCmpwfFRQfVE:kXmtadqhjaHScrHXnpzM/91ZCmpwfFau", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349052, "uuid": "bfcec47f-8d2e-4115-9138-d5d581e2b56e", "value": 164970, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349052, "uuid": "95400c00-32a1-414a-ab71-d1e3aa6e6cd4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a14ffee-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771349052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "df318d90-3173-4c46-95fd-778a2bef8b38", "comment": "Malware payload", "value": "b015cdd70f7bb7a65ca75e26b64b58f7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "ec365246-e33d-4fb9-84e9-f0f8822f3c69", "comment": "Malware payload", "value": "e1c410b09d24a875639cef93de377ab4031aa34b6328d231c4e5f89913e930dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349052, "uuid": "a0917cd8-2118-40c1-b4b9-ae635a13098d", "value": "T117C3F5066B0D4F03E1532DF4277B1BE0839BBD5228E9E680B51AFEC953719F29506E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349052, "uuid": "c02bb611-3f6b-4e28-b792-f633c93f2f4b", "value": "1536:688Hdrxh6qP+Ey3ZdVRyih2QkrOmGG1vANfNZdLBRLeLZaEqPyUf1V:CdrxFdSvyi3krdCNl1f1V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349052, "uuid": "8e40b0da-e9d9-4537-8b0b-3997b9ac10ae", "value": 126580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349052, "uuid": "5d530986-cafa-4f29-8f54-f5440003830f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a2054fd-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1771349052, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "5c5edd3c-c1e4-45d2-b464-dbbacd3ab14f", "comment": "Malware payload (Gafgyt)", "value": "31efa5cdade72570ba8470a69c6c9821", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "1496aeae-3565-4f64-9049-9bd307dfd6f9", "comment": "Malware payload (Gafgyt)", "value": "79f0145ae64862b8224f1dd181a053273649361277b148dc6e058fb410de6da2", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349052, "uuid": "1e0ea42a-cdc6-4405-92fb-58ebd7af507c", "value": "T12BA31744F8448767C3D327FAE78E439D7735266457D733116A38AEB42BC6B982E291", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349052, "uuid": "cbdc466e-b74a-4bda-8950-398ee94ed41d", "value": "3072:vlXmjWRiQ6wf44YY873GdUmpEqQ45vVXY0X:0ji6qnYY87xmpEqQ45vVXY0X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349052, "uuid": "25b2cb40-c91f-43b1-b10f-b7727c8fb89e", "value": 105111, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349052, "uuid": "5d217e91-d1ea-4e8b-bf75-ecd5d932dea3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a670ceb-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771349053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349053, "uuid": "ec599fb7-4a4a-4e1d-aa0a-49420fe486ee", "comment": "Malware payload", "value": "226b71e45a546900497f8e7eaa2185dc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349053, "uuid": "87ece55a-27ac-4245-93e2-b11976edcba8", "comment": "Malware payload", "value": "3149a18b58d9f270802484e61010f47b151e4d5e6eb9417b7dfdd7b500b88891", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349053, "uuid": "31c49bcf-bfbf-4e6b-a017-39f65dcc9676", "value": "T15334E14E6C2F1316BC594431CE7A81824E9F6F2C8782331E270F155E95ADFC1BED68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349053, "uuid": "255fb3a5-d935-4669-a374-783c1d58bcbf", "value": "6144:XyDYvdeWpUTxC3iAxde0+RQ6YEec1lgpT:XyUSC3iAxdXBA6N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349053, "uuid": "e480c048-f2f3-4914-a642-fe46be237d88", "value": 247889, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349053, "uuid": "9f2aceb2-bdf5-4e8f-b35c-19cc49075f82", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a7cf521-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771349053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349053, "uuid": "7696e037-ad5a-4b04-913f-cfbdbeab927e", "comment": "Malware payload", "value": "903de33c57a2089ff3e34f83af34053c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349053, "uuid": "d9e63268-f06a-4568-b15a-181feb498132", "comment": "Malware payload", "value": "08366e6b511e8f7888271c8e48fb26e5862c227d55eaaa9190f11c890e744731", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349053, "uuid": "e7b4ccae-2db0-48a5-9df3-ecf640df2134", "value": "T16283D686BB43DFB3E84324F542F75B354A32FC3A5C26DA85E324BCE58A115C0B6163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349053, "uuid": "7fc0c6e1-d247-4b2c-9a26-f210dbefd7c4", "value": "1536:s7Du+OjgNxAAMSeGEkf3BhaB/V4SEbF9mO:0DOjgXOSpEk/BulECO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349053, "uuid": "8e472dfc-cef9-43a6-83a8-2fbf51e6b696", "value": 84068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349053, "uuid": "70d3867e-48d5-4b5a-b485-c3d50949f496", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ac84019-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771349053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349053, "uuid": "9327c541-cf37-4ee6-85fe-18a73842cefc", "comment": "Malware payload", "value": "92a9ba074ce94c87e014a8ba29182662", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349053, "uuid": "8cf783ac-e3e7-4b91-adb4-ef6c42796163", "comment": "Malware payload", "value": "4b719e2e3e5baf602d731b4bd96b36f94906ea8e5de1adb1a2a44c02e74fc0d7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349053, "uuid": "80a01970-8218-4870-9a08-b6b435116e0c", "value": "T1165413914AF6EFFA49CC518E4D2D90BB31E0B2CC8942F6D4DC0FA064D19BE8607AB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349053, "uuid": "c0625c21-c52c-431f-9275-14d7a72fb6f8", "value": "6144:6ZfGXzUCSLUoDTGx9ZHTr2izMLTio3GhYZW9bLG:2CSUwTGXZHTr3ziio2bLG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349053, "uuid": "e8f6c434-ee2a-4302-ae65-52bf17c2eb4b", "value": 283728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349053, "uuid": "9a21ca28-9dca-4aa7-b425-1b3e420d2f04", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7aebde77-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771349054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349054, "uuid": "24aad404-c86e-4b55-a617-52826fd6d1a2", "comment": "Malware payload", "value": "65edc22a2f821d461e8a70ef31facd49", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349054, "uuid": "b9112e4d-f404-4709-9ca7-4173c4be2abc", "comment": "Malware payload", "value": "4f38fd139d87d6df0b391adb42020d941cff54837a6f9e680eb905c45cbd5603", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349054, "uuid": "14c8a6ac-0500-4054-9997-29a44fbd6420", "value": "T14E34E0D8216F8CD52B7E407B46CD0E247B62EDA8D78DCD1AC5675BF368522081FE24", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349054, "uuid": "7a13afd1-8eab-44fc-937b-02bc7528e9c6", "value": "6144:EQ8kqG0IswtynczbCizDdfUU33ehnQ3na4tZetNDbF:EQ8TG0IsZmRDdfUU0nQ3a438", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349054, "uuid": "d0e3560f-be60-41e5-a8b7-ac94e44078f7", "value": 247883, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349054, "uuid": "276af153-0e12-41ca-a9d6-7c65e3fa4d46", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b3ce391-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771349054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349054, "uuid": "0f5cbcf7-deff-4f50-b56e-6b4be2b3762a", "comment": "Malware payload", "value": "73ba5d8f561c92c83a0571cef448b6a4", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349054, "uuid": "fc2abc97-470a-4d15-85c3-de466f907128", "comment": "Malware payload", "value": "a6a37341db0b3747abc3c8a116fb59520372f6ee39c00191432988f12c9735cf", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349054, "uuid": "3abeeb92-92a2-400f-9d3e-8c00500a9947", "value": "T11D5157100EE61258F2B78B715BF9B371897BB860DD394ABD004D82445773610E8B4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349054, "uuid": "6812c100-21bb-41dc-8f8b-d8c5b7868716", "value": "24:8Ayw/BHYVKVWO+/CW43GlswIJtsmaoghs5X4wJ5CWAcEf6Lkjm9dd79dsrabFI:8y5aFawIYag2GwJ5CdcEfnm9dJ9Aa5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349054, "uuid": "f67cb86a-8edb-4d98-a2b3-fa1a60368fed", "value": 2944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349054, "uuid": "70af8490-2594-403f-842e-e2a37654772f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b81094b-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1771349055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349055, "uuid": "de3fccb3-c621-4a71-83e7-9268f20ebc1c", "comment": "Malware payload (Gafgyt)", "value": "f827e5a8f6eeddb6de7b5e6feaa200cb", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349055, "uuid": "24958744-e6df-4724-a796-55f005fb3dd5", "comment": "Malware payload (Gafgyt)", "value": "9e4e12e6ce830f2e813addd8e7e4933153cf1204ed4daeb85b6edfcbfb84cbec", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349055, "uuid": "b8a9ccb6-522a-43c5-943d-b8e0df42a4ae", "value": "T1E3D3A56EFA12EBBEE16C863107F76F70D39531A22AA1D381E16CDA181E7125C1D4F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349055, "uuid": "9d5a4940-05b3-4fb9-81d9-174eabcaa08c", "value": "3072:7yfy/nxNak8f3FTXOFVJ5vUV2/zizybisFejdt1UhBl5tly3G5Ozk6DhB/ZZ9B8g:6fnZSZHbJeUmkASFxBKvXZX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349055, "uuid": "ef3fa4e9-bbe3-41ef-a294-208742831295", "value": 134222, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349055, "uuid": "56f21740-c47f-4673-9809-19f317cd9696", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bdc9e6d-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771349055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349055, "uuid": "31124c49-e71d-4b05-ba44-b1a500bcabf7", "comment": "Malware payload", "value": "5f9b0c36ad000c0524770541ebfc1b51", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349055, "uuid": "60e5170a-961b-462d-bbdc-018bc8f69812", "comment": "Malware payload", "value": "ee67a6e39bff4ef7bd574befafe772e3d415ba02c63dbb76f145c13b0670b357", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349055, "uuid": "efb9e9d2-d4b8-4613-8d25-c693f0752099", "value": "T1573401D930FE4750663858BC7FF4878FBCA1816CB856D8EEE67A5813A40AB007E6D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349055, "uuid": "a126b302-6bee-4d6e-a0ab-130b6bae5030", "value": "6144:yeF8zTeFrc97BCBxs0GyaNwPyAOa8mF50AMj:yeO11EC0GyaNGyHan0AMj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349055, "uuid": "99f93dec-4e5c-487c-ba33-64c848e1c698", "value": 247885, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349055, "uuid": "7f291673-45c7-4d69-86d9-93dbc1649d0a", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e42a19c-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771349059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349059, "uuid": "2cac412d-6a78-45c0-b5f6-b3229c86a6b7", "comment": "Malware payload", "value": "4538238d15f8bec2b05c033824901455", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349059, "uuid": "48ef16dc-730b-48e1-841f-ca5ad3f2eda5", "comment": "Malware payload", "value": "96db07b30005e86da7f20c7494337873b9a8b36bc46113f60cef2107bbd8c3e9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349059, "uuid": "9f5d77a8-b80a-417a-8ac3-6586167feec9", "value": "T15C83D682BB43CFB3D84314F142F79A354A31FC2A5C36DA99E725BEE5C6524C07A163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349059, "uuid": "ff5a9147-20f1-4741-afed-8d1c450d15cd", "value": "1536:iNg0rR3Qxh1Fe/WYowGRdUWQK68rL2/736QcivNgj:iC0rR30h1Fe/WDwiJLfrL2/lO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349059, "uuid": "c517fcd1-827a-4b69-bfed-f95efc373afb", "value": 84836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349059, "uuid": "bd914da0-77f3-4cd7-9276-634fef8ee001", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ab4f14b-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349169, "uuid": "8645423b-3b37-4d31-9ca6-e9498df76ce1", "comment": "Malware payload (Mirai)", "value": "1207dee19552465f62fc19567387bba1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349169, "uuid": "5e682d7d-6f2b-4fde-a58c-44067441e756", "comment": "Malware payload (Mirai)", "value": "5492a398e2b2ca559193dbadd21c264bb0052162213ae69cc7d4ab2136a6f18f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349169, "uuid": "a99d6b34-4d7a-4aba-ba86-91fba6529735", "value": "T197932982BC409A11C6C50777FA2F118E331267ADE2EEB252CD141F647BCB91B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349169, "uuid": "27020a6b-07c6-4178-b19a-692115186039", "value": "1536:+SnU1pvZIptjleJ3/+GpNMu51HrTxv9VCJ70qJdVBI04KzQII5izpOlmQhj:01vI/jl2v+GpNnvB6YqJXBXpOlmQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349169, "uuid": "ede70360-4745-4a38-9282-73ef21bb681c", "value": 92812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349169, "uuid": "faf3a06d-fc91-4d89-ac03-1e5f85038912", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a8d46d9-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349173, "uuid": "254df45d-2db8-4e77-9193-fcf8ad8aba1e", "comment": "Malware payload (Mirai)", "value": "840a3bba4e0f3280321feb4c54fd3e95", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349173, "uuid": "60f3e901-4455-4a79-9919-db69199ae639", "comment": "Malware payload (Mirai)", "value": "0f45c42471fa0eb964d19ac63cad76bfc7920e6b56510296b983a291b309419a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349173, "uuid": "052ad136-0b0b-4960-a18f-b454882debea", "value": "T16C832824A8792E57C0D4917A12F78721F1F6330E15B4CA6D7D760F8EFB54A80A91B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349173, "uuid": "9b5ee738-ecc9-4f87-9cf3-616d654f2126", "value": "1536:2Kay5/POr5xpnTgaeL174tugqpV75Q8Tp1JLM6:pbFwLABuu3V75Q8DJv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349173, "uuid": "630e898f-5c61-4f02-88ca-79aac5572220", "value": 86744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349173, "uuid": "15ca0d60-0bb3-456a-a958-de2161ba48ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a4cefad-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "58644ef5-e3ab-4f99-bdf7-8a79d5c60b3c", "comment": "Malware payload (Mirai)", "value": "9acbff3b9949ab928e486ded6a35d9fc", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "b23e0c99-0412-4b67-a032-98696256da8a", "comment": "Malware payload (Mirai)", "value": "79421547a1f520da7ce7516916f9475dc1d39c3b87811e173e9bfb52bd7d66a9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "a20a9c94-dad1-49dd-8d1e-371e40fbe630", "value": "T15F834B46E687F9F0DC4109B8116BFB35D936A8323130DFF7E7C4BA57A999242A0532", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "83fec1c5-15ca-4752-a79b-b9ef9f60b86e", "value": "1536:IPQbusEfwO5cpsfyL88EdJsxK9wKamctYd3M0SD7zqmCCkkt:MQbJYwkxy8sxuP6vD7zy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349175, "uuid": "ab7e6597-3724-47d3-baf8-e6e4b2c90ae2", "value": 82520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "901d6eed-0278-49a5-9d38-63ae1b876b8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c3bc526-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "05ab0471-4f83-40d3-a0ff-bd2484ae39bc", "comment": "Malware payload (Mirai)", "value": "62be5c925f7247edaf715cb77ea1bd70", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "12599a39-3be2-40f0-860b-e29dbe04a768", "comment": "Malware payload (Mirai)", "value": "1d8dd92aed0207d8191cd467a71530827e68d8e4523bbc151636ac9f50d8566a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "30e2bd60-5376-49da-8cae-7c8256808c3c", "value": "T1DE735CC8A5C3E9F2EC040E783177EB719D37E53B6139DE9BE7E96523AC4160291022", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "562fc387-9d13-455f-934f-4980f39a5520", "value": "1536:rSHiADL/5OY5Kh3DQ8hnxWD4qMFOZtJPkJf18Hb0LWFWACHbDUV7yb/oUkt:GHiGL/s9ZQinxC4qMFOZtJPufCHbE88j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349175, "uuid": "89c4e5f0-7b28-4697-b351-f8ecc062bec9", "value": 74512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "8e225e6b-2e05-4d57-984d-178eece4ccad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3af789f2-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "a2b0e40e-ea60-43ae-97d3-c91c6452ba2f", "comment": "Malware payload (Mirai)", "value": "9efdce2ff67cfb0d79cae3bf3d34bab0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "b7118949-9858-4e8e-b104-131797c64209", "comment": "Malware payload (Mirai)", "value": "e0789fbf64509e8fef9b8eb251d11c7076672855f56710ac2266bcd738542df0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "4932240b-2e09-4c2a-8296-ed5e8c2e50c7", "value": "T118734B96B4119EBCFD8B95F981220F0EF42163055B930F27B66BFEA37C620A49D07D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "966d9b63-5356-490b-aa77-0751a26c704c", "value": "1536:2jv2hZem+8XOpI+zlX972dpOqGMk0rWk53tlpJi8FyQfl:ym+bpI+z997YplNa+lD1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349175, "uuid": "05519216-5241-4cf9-b569-dccf455ffb40", "value": 78288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "bc4f8284-9e0c-4e6f-a1e8-4d3218ad692f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a55efa2-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "ab21b0f1-bf84-415e-bc1c-42f5e8d80458", "comment": "Malware payload (Mirai)", "value": "b840d5c04960f170824893570f70e913", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "d1348928-81d9-41ca-a743-b2b471ea7466", "comment": "Malware payload (Mirai)", "value": "01eaee3b249950d33c2b7c06113cbb342e0681291f6f76ecf20d86eb88aba310", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "cb3476d1-58c5-4dc0-8118-9529fd289fb7", "value": "T1F6734B0137548E07E9EA0EF9282F17E483BFEE4021F5F1856A0EA75A4235F73545AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "b4c50e42-79e0-444a-a382-bcedd0d41bc6", "value": "768:v8KmKlUhpiGqqRMQRJqsF5JRXeSe4wsganGNEy+uHne+Amr6U0JhaYW++OchU5dR:L4l9fTwsg1od1W++OnNdCNTHemXR47", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349175, "uuid": "4b3870fe-b81d-417a-94f2-fa45f0ab6855", "value": 76976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "1ca14e49-1df4-4878-9756-ef28d6d21fd5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a509cc0-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "1f645c26-ea64-4fe6-b5c3-1967a2dc3454", "comment": "Malware payload (Mirai)", "value": "9cd7eaabbb16d39fddc13b5986903a92", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "c635b4b9-3202-4156-a8a8-9e04ee9fc80d", "comment": "Malware payload (Mirai)", "value": "f1939cf1d802e9f819b996dc3fbd5b5c3eb30921a449cc6d7ae7bc7461c7c61c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "685b14bc-38e7-4060-b98e-1ab18da9b8a0", "value": "T154A3820E7E319F7DFBAC823847B79A219209339666E1C588D19CED025E7434E341FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "084d7016-3230-436e-b7c0-3c4a4e3c24e4", "value": "1536:nFAoUgB00aLmv7pibxxIm1IjdnD1KFcT6PHDz6aNoXfyaHwMj:FLUgBF3pibgm1IdnRipPHDz6aNoXv5j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349175, "uuid": "e9405272-df43-4ff6-bd4e-11a766676442", "value": 105376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "542d7fee-3686-4363-b4c5-4f19ebd1f6bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a6a4f45-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "f863a31b-2164-4634-8e19-875fee41237e", "comment": "Malware payload (Mirai)", "value": "acc025d06fdbeb467de83b9a40cb4a30", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "fa596462-7c8b-4fa3-874c-be4b6daec7c9", "comment": "Malware payload (Mirai)", "value": "bf178ed57633c1d44a944e0458ece64735b156fbed3f9481aa1c3a02fa53a01c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "d119dc9b-d1ec-4824-a654-ceb7f22ed56a", "value": "T11A732A42B98586EDC088E53807BF7539C416F4BD1379B1EB37C0BF1B2809E611B1E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "d51efd86-d478-4e5e-b0b4-045adc7b7d8b", "value": "1536:ON6Uvn6A2QP/RWnAIJUtRMXGXe1FXJVUMvTCYXczYffjkE9:M6y6g/R8AIJUtIfXJVUMbCYXVff", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349175, "uuid": "9fc01408-b0cf-4991-a83b-f97eedbaf385", "value": 79552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "bf3337fa-db4a-401c-834d-f06eff125754", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a81b3f8-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "a0ddc09e-8b47-4072-b3cd-174f00cb8e45", "comment": "Malware payload (Mirai)", "value": "137b7b71f928d82601d1364aa27bc65a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "256ca088-68f2-469a-a2ee-df7e4acaca44", "comment": "Malware payload (Mirai)", "value": "8ddd1839e5678dade2bbc568e93419d62450cef2aa23ee0a380b6ca904dabe97", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "d72d96bf-875f-4128-b9bf-e81fad0a55e8", "value": "T17D830881F8C741F5C917483460ABF23FCA32D57A81719B7DEF99AF26DA3760291132", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "dc18467e-69c9-44b6-b656-af6c9b9c398b", "value": "1536:QLzLyi7HkIhDMKM9NNMQp/rSTyWCz7BYqCTRBzU2Okt:QvrHvhDM1NOQp+yn7BVCFBw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349175, "uuid": "2ae51133-4f22-4af6-919b-c4620245bb9c", "value": 83728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "71042cde-0449-4037-9281-05ce2d7474b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "866dbb2f-cefb-11f0-bee4-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "e3db1b76-2f9c-420e-8b2d-408db4547d97", "comment": "Malware payload (Mirai)", "value": "e3ca702505aa8cc3944e0bbfabdceb40", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "9527928f-45b8-424e-92ad-ed9dbca87ba0", "comment": "Malware payload (Mirai)", "value": "c78ca6ee275aec8ce7513d31c5332e1e7ad7742308d0ce3d70393aac4fc4ea26", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "1a530238-5645-4859-904b-c080e950883e", "value": "T124D312ABCCBB89CEFE6A8FB52657094F0DF6E1D4E5843D98453B108027F8256A514F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "2f91cdd8-2fba-4d59-8efd-ed74dfe1fa7d", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6con:7O/QJHZweEL/NOjCHm7FZZnca", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349175, "uuid": "83d30d56-7021-4b0b-bf19-12b0dc9a10c8", "value": 135660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "9d8a8536-40a4-4669-9446-2972c50a6075", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a7e888b-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "9f7710ce-6e52-4e42-a293-fe164f440788", "comment": "Malware payload (Mirai)", "value": "93b2dfc150bd892293905b22563f5443", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "b686c7d1-3cf1-4009-887f-f83bbd725b16", "comment": "Malware payload (Mirai)", "value": "070aaea98ea6bc9e8a0321b6082d47b0e856d2dd8becd3dc44ca01f609bfb395", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "4af6aeb6-cbbb-43ca-814b-2436330dbe79", "value": "T173B3830A7F600EF7ECABDC374ADA2749249D141A21997F75BD34D818F24A24F19E78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "ab78459a-da47-4eae-aa9d-cd33df864d20", "value": "1536:cbQvWVAo+/D+jr8Cm3tuW8QB1x+dYwQ3sZINs6uZaCyJsz:c0vWVAo+/D+jNmd38QB1xmn6u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349175, "uuid": "8c848793-0e0c-421f-8467-e565aefbc4bb", "value": 108704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349175, "uuid": "9b7f5c8a-2620-43ec-993e-5222ea148733", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a2396c7-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349176, "uuid": "05054c1b-5001-47e6-8663-c92e79babb0b", "comment": "Malware payload (Mirai)", "value": "89228deb4c3a70afe0c8c1bed5fb6912", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349176, "uuid": "47ab6e9c-4490-41e2-b7ee-f99fa46fd802", "comment": "Malware payload (Mirai)", "value": "3c8f3746e5682ea28abe8c309fa520cce012c1dcfbf12baccef6216aa2832f50", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349176, "uuid": "e8faf62e-d147-4b5b-983f-30be8cacb858", "value": "T1B1739EB6D1685CB4C4404A74B5A8D9B44B137504A2B33FF2CA828F695407EFCF61AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349176, "uuid": "faa653e3-1da8-408a-8bfd-1488f3935489", "value": "1536:+/OPr5Ca1yuRikC4hESIFkCFUPnAkyCHn9:+arkre3SSoXFinAky", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349176, "uuid": "1bb6878d-0f8a-45c6-9c02-b9107637751f", "value": 74832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349176, "uuid": "d7441a7a-70f1-4d61-8b8b-8883806d1b4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c676ce7-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349176, "uuid": "7b09471c-dc48-44cb-aebf-f3e77cb21df9", "comment": "Malware payload (Mirai)", "value": "8dafdc64547a8d81ed86d590faf99950", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349176, "uuid": "73feca5b-fe52-42a0-be0a-50740277cfa7", "comment": "Malware payload (Mirai)", "value": "07b9b06bf10bfbd105c955d159090b708e7e1a156c615de27fb06761034bc02c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349176, "uuid": "be0b1b9e-8149-4936-9705-55e467e46b39", "value": "T19BE35C86EA408A13C4C61777FAAF414D33229759E3EB73068D185FB43FC6A5E0E276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349176, "uuid": "6851dda1-7e3a-4f07-b975-ce7cd316eb31", "value": "3072:r5Bu/iHVi69d5EC3yfOYqJOWJ5f8SfIUYlMoGfk79M/9At8l:1VViS5ECCGP5f8SfIBlufkxM/9At8l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349176, "uuid": "9a9df459-4c5d-44be-bfea-b9711974a9c5", "value": 157087, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349176, "uuid": "9537e808-47c5-48c5-84e9-654f16b3518e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a373e9a-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349176, "uuid": "a2848676-e04a-4ace-a59a-dcbe7db9d376", "comment": "Malware payload (Mirai)", "value": "40376b90d1c34d1aec6e7467b38737a3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349176, "uuid": "eba17a99-15db-4e90-9be4-e007870272a3", "comment": "Malware payload (Mirai)", "value": "ecb273c3d2fb8a4483e215469cb179b697704df2ad5f58926496d5e7dd158fd8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349176, "uuid": "23aecf7b-a340-4212-8f50-f7b53a041fc0", "value": "T193830682BC40EA16C7C11277FA6F108E331567DDE1EA72429C251FA07ACE91F0D6B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349176, "uuid": "3a1079c8-26ef-48c4-aff3-f618d188ec99", "value": "1536:4+mjogLq1cMevK6uwqTbh6t7VZGC5NwDe8UV0B8t46/OKp7hJHFz:VmVScJqTl63vw68u084YOi7hJH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349176, "uuid": "199a7be7-8178-45ff-9b42-5795226014dd", "value": 83120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349176, "uuid": "533c9ebb-07af-472b-a43f-c8dbabdb8236", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11035a70-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "a28eefd6-9f61-4da0-bf0f-62b349e14e05", "comment": "Malware payload (Mirai)", "value": "b13844bb2c843f07ee75a4df4b5f5b87", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "775bc992-36c6-4727-a9fb-8bdc917c92cd", "comment": "Malware payload (Mirai)", "value": "375dab2e9bec9e885e1566779b36ea103075964ffa6f15c1d59f5aa140058e46", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349178, "uuid": "bb0b471a-72b2-4e49-aa97-a51c710cbea1", "value": "T1918329792885F66CE9F650B8F45329E619120A083FDCD1E36893143BFF70B48B16DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349178, "uuid": "9e8aef9a-6a17-4f6b-ba32-3ca6175bb9c5", "value": "1536:d2qnPb9iSGa83jcZU7N8MPAVBIVCCfy0K96KEBS:AkPb9i9jmU7jWue", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349178, "uuid": "99200f7a-c659-4199-9310-e7297ae04d44", "value": 83328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349178, "uuid": "57996fc0-9a6e-49db-ac43-55230232e809", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a4e74b8-0b0e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771349178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "f7d138bf-e3a3-4b46-a49e-be606bfc7c5a", "comment": "Malware payload (Mirai)", "value": "ff14534a7a6c2ceea573d7378ad62f56", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "58d77897-a920-4f0a-a517-c65f314acdf6", "comment": "Malware payload (Mirai)", "value": "e9f92ade1cdf3821c1a3a739eb6545e0bcb22a856c0fe0070f955efe2a3179a4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349178, "uuid": "96096af6-d464-475e-a006-57e018fe082b", "value": "T155730882BC40E62AC7C1177BEE6F109E3310A7DDD1DA3246DC154BA47A8E91F0D67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349178, "uuid": "3de5fcf2-65d4-4262-bfe8-0affa260f7fd", "value": "1536:tNYOXMpfgaS5qD5uU+sVzctI5lBxWlPUiJzB8t46q7galh1zt:l8pfofe3BxaPUYd84B7Tlh3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771349178, "uuid": "b9841ae5-f5d1-4ef6-b048-11a2a2436f88", "value": 74984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349178, "uuid": "02f9c397-ddff-4177-8231-7e88f33e100a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "943b4da8-06cb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771350486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350486, "uuid": "4853f7aa-0d5b-430e-8ef9-e10cd75fab23", "comment": "Malware payload", "value": "6972ea93ab927a279d98240a0de6be0f", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350486, "uuid": "dcc8fed2-6ef2-4052-8d66-2c86953334ff", "comment": "Malware payload", "value": "143a5b5c78fe71f2c0883a6a959937938b6288a15ac5cb031d35472b413a6c48", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771350486, "uuid": "4a3eb905-7352-4e19-a1d6-5cc2426a56c9", "value": "T1452523CC914A5C60ED2A8531FBC80FCA0D13534620BC9EED685596692BFFE64B501F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771350486, "uuid": "2e918eed-b8da-48d6-90ca-b756f1255d58", "value": "24576:grEgV6dABDNOjAl6Gu7NYReSjQNEwUi2sgQ27kBrLkw1NUWF5:gIgV6dABUmi6jzbi2lhuQSL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771350486, "uuid": "54d281a5-7677-4063-b0b9-76f327451be0", "value": 1044108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771350486, "uuid": "776dd1d0-2632-447f-b7ae-4987f8c67799", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6943b5a-0c2a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351328, "uuid": "518d26b1-936d-4adb-b12f-2525a5e9f135", "comment": "Malware payload (Mirai)", "value": "c6a1e984cd11af49923254f060c3e9cf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351328, "uuid": "6da9abdf-8cdc-4f4e-ae4a-a52b460757ff", "comment": "Malware payload (Mirai)", "value": "5a8f8f29cada2ee39c5c32ff905e7e1ae21c468ea6d12edb4203276f984f6392", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351328, "uuid": "dc82da00-2b95-4d8e-93aa-02b80e665f37", "value": "T1C8138EA2C06DAFD8C1488674B8284F781B53E445C7536FF99AE945A68047EECF60C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351328, "uuid": "5ad19469-9a4f-4ccd-af3e-e00e35bc872a", "value": "768:NanapGwtbGbh/EEZYePDznRVrgrq7OhGdv/qzCvoBJbCb:Na4Gwtq6ECrq0Gp/qzLLbCb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351328, "uuid": "0224ab22-80e5-4ce9-9baf-f97bd4a8acc2", "value": 44348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351328, "uuid": "4189de1e-66a6-4b10-905d-b8b0befa2c42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6b46374-0c2a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351328, "uuid": "c64c3f05-8e52-4907-a639-daa55094428c", "comment": "Malware payload (Mirai)", "value": "a85d7303997b6c7b1c2e43ac103ea1e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351328, "uuid": "50702061-63cc-4e19-92b5-f95ce249a167", "comment": "Malware payload (Mirai)", "value": "84560ab673c071fc2fa8505164eceea1bd9c4bc61a2b882917fc367cf1db9004", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351328, "uuid": "b92f08c0-d2f2-4d44-a995-cb5ab4670550", "value": "T15F232B42722C0A47D5A25AB0393F0BE093FFE99120F4B6892A1FD7468635F771586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351328, "uuid": "fe904bbe-c1f7-434f-a3a2-836adcef2f0b", "value": "768:fWLJhV3pc1tbRC+3u7RsGVBCnfd0aC3E+n8Vdk/fEXIZyr:fIRpc1tbR5kDPAMcXkq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351328, "uuid": "004ddb50-3d1e-4dc1-80ef-cfe99872a6bb", "value": 47140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351328, "uuid": "a20b8232-ef3e-4168-8cdb-6dd2d12cf779", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5165785-0c2b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a1cffb59-b1ef-4ca4-8763-e397b1931011", "comment": "Malware payload (Mirai)", "value": "42657cde0da9b683f924a055b16064f5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "3852f4d6-167f-4c8b-8d95-0b2307e629d8", "comment": "Malware payload (Mirai)", "value": "f639c191db57637f213e7325bc26d75df0938ff53df45764b45b4399f5224d06", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351701, "uuid": "839fa5fb-14ec-4a48-b129-55268988ff95", "value": "T1DFE02258145A21A23F430E647A27BBC13144AC46AA10192EF36CBE134E7CF40770E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351701, "uuid": "00ffc812-50cb-4963-a660-ce7f23baa6b6", "value": "6:hdc4UJ0OXOZYzBqlQXZRlzTjafw7qUZtHvqxqU5ywSHOa7bNwb:XyOZYzYlE/ja4731qxXAuaHGb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351701, "uuid": "ea5df034-ed2f-43f7-871e-20c123320050", "value": 412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351701, "uuid": "abfaddd1-6af2-480e-a016-8430a67fd879", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5007a379-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351988, "uuid": "c66bfc94-aefd-4a63-a68d-4a19dbcb4aa7", "comment": "Malware payload (Mirai)", "value": "d49aac010159dafdd7ac00880a6081b2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351988, "uuid": "2ecc9561-2da6-4b6d-a5fe-d1559806ec4f", "comment": "Malware payload (Mirai)", "value": "ee25ab66df7c37d9c4ed6be7ee4a487c4c66ac39e416ce89f4ad06d66ae85090", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "66305762-6547-4148-8394-827886dd3566", "value": "T13E63954E6E719FBCFBAC863447B75F209248339626E1C684E15CEA011E7034E745FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "711f6167-f01b-4e85-920e-9a64817fc512", "value": "1536:k8aCKgyaDrIjtb3stmjpYpt13Byvba7dY6UQ+eG:fHB0Jb3vyptfyza7dY6RHG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351988, "uuid": "af8b3430-03a5-4aa8-b33b-8a12647d4549", "value": 68256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "a2c3f5ec-1071-4c05-b7b0-599b599af28f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50095b33-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351988, "uuid": "8fec5b33-d329-4723-b965-8ebb1c2a8d63", "comment": "Malware payload (Mirai)", "value": "bc44be5360662edc5bf2300188b10704", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351988, "uuid": "bfc77d19-8bb3-4096-a340-18fc47459523", "comment": "Malware payload (Mirai)", "value": "8276c217e79afb29f7ac6afd393515b15010247df0d77a0c69445951850b579f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "29673ee4-2f0e-4bc2-8443-35090c1fe1fc", "value": "T18B238DA7C43CBDD4D15982B8BD248A3C5B23D016A6933EF6764785628047EECFA093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "96f818b1-84ef-488d-8321-19144aad3e4c", "value": "768:baV/jptstaT85n1OEwtgB4sNTeBrK6XXG0QJqF5Uu+nprxC+oCZ21CuHE:baV/3s+YbwtgV6KXq5U5pNCG21Cu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351988, "uuid": "58395f58-679b-48ae-a913-f2abb35685a4", "value": 47560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "c17c34e6-18f8-4f71-bd7b-a19a91df56cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "500a698c-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351988, "uuid": "4bd945d6-1619-4355-9c88-73426277dddc", "comment": "Malware payload (Mirai)", "value": "88232a980d6ba64887c3cbca096754b3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351988, "uuid": "f35e1f4c-48c5-45e5-abfa-2f7fac282c11", "comment": "Malware payload (Mirai)", "value": "1d084d84e9b66044c1c2ed358e2196635b21c7a847b72451ab6f39728b6fc6d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "6117a1ec-ba95-4151-a46e-f0941a68e1bc", "value": "T1E6331895BCD29A6AC6D463B6FA2E519E3321A3E8D1DB3213CC104B1437CA51F0DB7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "1bcc3776-b37c-47aa-9dbb-e583ceeb08c1", "value": "1536:oNA/C3y0ARjBgC+O2Ewcnc7+rL2yBClt5g29:GA/Ci0A55Q4vEbg29", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351988, "uuid": "f900639f-13cf-43b1-8624-16bf1a5cbb09", "value": 53364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "26f4e8d7-48ff-47ab-8bae-85a8a2ff47a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5011f82f-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351988, "uuid": "c0bebc75-c430-4ea5-b3f2-ee9ddbda7a8f", "comment": "Malware payload (Mirai)", "value": "b0ddde001a2d15bbbc52d45e8c9fd58c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351988, "uuid": "6315cba6-f96c-428d-937b-c35fd707a3e5", "comment": "Malware payload (Mirai)", "value": "1c4321c896148e2b30e59232621f9d26670bb0410f38ae861ef463b88fb9a786", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "9c8ff888-3152-42e0-bb34-1540ece8fc18", "value": "T1C1436CC59563E9FCDC1015393077FF7256B6E93E1028EBC7D7A8AD32A941A02D8072", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "27a82b46-f74e-4642-9cc2-52f9d62703ea", "value": "768:CoXHT2eWvOW4b3E/yzDLbrCP8kTJwXHU/HYDOgcWt1XfWA+7tOfRc3ky:CojhW4b3uyzDvrCP8ywXyPWTF+7t+Rc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351988, "uuid": "009d583c-682d-4d0c-8aa8-2958b33c9067", "value": 55872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "63678595-e17a-44d8-b917-d1a774ac5274", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "501308d2-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351988, "uuid": "349f5fc2-576e-4eb6-b0d1-46e3257734dc", "comment": "Malware payload (Mirai)", "value": "877404a2285e4d2752156c13cd2fd704", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351988, "uuid": "1ccc2211-5d6b-49e3-9df8-93bf7181e988", "comment": "Malware payload (Mirai)", "value": "98870a66df03788e6adb2cc24a7eee69ce0935a6e9b965686c3fe684ed228d00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "8c454c93-7f48-495e-a5b1-cc0fb69dd575", "value": "T1D6338EB3C42E7DD4F14A8278B9244B385B23D40696833EF5968ACA974047EDCF6593", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "d1762b0c-82e0-4957-8a3e-224e6ef35053", "value": "1536:DoaN/rpY6OrwtAFeocUFH9qgGDg6owCc:Do4jnc7ecz6ow", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351988, "uuid": "b184e18b-3c1e-40a2-bba2-7f1a56a6df13", "value": 54684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "e1e347c2-a620-486c-8e19-e174eb11c192", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "501ec7ba-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351988, "uuid": "fa11e9d5-bbac-4577-a363-8b25771d235e", "comment": "Malware payload (Mirai)", "value": "ace386756ea124d4706b2849fcbdb028", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351988, "uuid": "ea21a408-abca-4094-9ae4-731ed266390c", "comment": "Malware payload (Mirai)", "value": "4c852983ef16df7169b74911b36d64c329573a97fecf1a2b65c97bac09fc101e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "3008a13d-8ec9-4812-92b8-129e106ca110", "value": "T145231892BC928A56CAD42376FA6E118D332173E9D1DF3267CC105B013AC991F4D77B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "cf74cc1f-ffd0-455d-a830-63acac06dfcc", "value": "768:dbjVOAsT0V8//IIsIMTUExYFrLiwXtQPVdNIeTBlieoE734woBNjyEtQ:BwAsT0wXXMmLiStQddNIeTbicZs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351988, "uuid": "97512ddd-ce60-4ca9-9da5-0979c9a4d144", "value": 46320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351988, "uuid": "0cc41b7f-71d8-4dbc-8499-937fddac7564", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51c6a8c6-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "0054be08-999e-4a95-9e67-b012c7be9ba6", "comment": "Malware payload (Mirai)", "value": "2e07b4972ec6f723bdbace8f62948238", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "14b33212-3e24-4feb-8a29-8adec4ee0d88", "comment": "Malware payload (Mirai)", "value": "dcd5021fef1f8d319d6e83cb83ec7474edf1232d2025353e125140ad93269845", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "0bd7affc-383c-4815-b9c7-c98c68b24818", "value": "T120331991BC919902CAD82376FA2E01CD332663A9D1DF3257DD216F1137CA82F0DBB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "292621ca-7e9a-4a04-b3c3-ea0d3166fe85", "value": "768:N5YbcubUXTrWOLInrLBB8gZrGUSTAdtj/L0gIe7xJNoikQ8BNw4xBgVMr9A2E:T6cuOH/EBwUSsdt/0gIeNJZuxe+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351991, "uuid": "8ed2188c-bad8-4a00-bab4-90f635af1fd4", "value": 54088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "6cc5ce1f-dec3-4716-bf3f-ddcb779f7b23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51cb5c5c-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "aea62e2e-1bdb-493e-89e3-58327f2e9724", "comment": "Malware payload (Mirai)", "value": "5d66f07d4110f0281e4a35a20aa7ee0d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "2cfe1f09-5e0f-4c7c-a632-82c1cc0e9326", "comment": "Malware payload (Mirai)", "value": "2b708a9f17a01575e41a26d09bb542bd7b7d889617af00091d447bf6b622fa33", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "fc627305-eaf2-405b-9fff-d84daf533747", "value": "T17D53F946FC818A06C5C513B6FA2E118E33136379E2DF73129E106F6477CA96B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "996326fb-5c7a-4016-b6da-f4af5513b6b3", "value": "1536:MZniA5dB9VT22IrmE2RJqWhQczKvk6VnaPgJALBIkiQ3xtZWZ:ydptCm7vqWOczK5Vaj3xtZWZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351991, "uuid": "5e294974-4856-48cd-96c7-064c1ae0ea3e", "value": 63172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "66abcf2a-c13e-4a15-a041-96096241b52c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51cc7b29-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "bb70084d-a287-4e9b-9119-047c56e01d32", "comment": "Malware payload (Mirai)", "value": "a8b3f7fbadf66a764631d1c05ce21e25", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "b9535f2e-1c40-48bd-965d-530255e58f75", "comment": "Malware payload (Mirai)", "value": "f41f14e9faa547f662404b6cbee6711d2922a73247dd81976961126fff04c56a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "c1db2c08-1038-43ce-a795-51fe11ca0e78", "value": "T1B4234B42361C0E47D2A65BF4293F27E083FEE9A020F4F588260F8A864575F77518AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "e84e0149-e894-4d7b-9def-fae92d490b7d", "value": "768:kK4YZ3fcca/hTprOERo1kVUEgPC9+L+S2K8CBqO0VJPttABU0sBW7eEJ:2ckprDjUEgPC9M72hQM6vsM73", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351991, "uuid": "758ef08e-fc88-43c1-b6d4-a68c84c1c605", "value": 50092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "3e785699-00ae-46d3-b177-69e376b5205e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51cf4e01-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "9dfc9546-6378-4070-bb22-53eb96fb88b8", "comment": "Malware payload (Mirai)", "value": "0cce75cda20a1532ddfd40b3afb3143a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "c656ced0-faf9-4b71-990f-c455bb8bab34", "comment": "Malware payload (Mirai)", "value": "7ebb02380ab8e0fcfdffc3802a1cf0a01ae74f99006351418360cb9e9ba04cfb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "8b226e71-d228-43f8-82cd-8d0faf69bfb5", "value": "T19263F749B8918B02C5C513BAFA2E118D331753B8D3DFB212DE106F6477CA96B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "cae11021-80bf-46eb-b29a-3a15009ef14c", "value": "1536:mZnK+jdJ4QLpoEDmmSPLJ3x7nxczKjrY2VyNufGEMr+PKCOLoI7i1p5aZW7:mqQ1xqmcRx1czKlV7fGEs+Hp5aZW7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351991, "uuid": "98fc32ed-b435-4c07-a289-7efc3bc1361d", "value": 70916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "cb7b36b6-8af5-43bb-9c2c-66976c13586c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51cf84d7-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "5e864276-b9fe-4079-960a-eddebf25f437", "comment": "Malware payload (Mirai)", "value": "ae2cfe5f7d674b4b45e14e36dc90645f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "9d176b4b-2fea-4db4-a933-734ec3823645", "comment": "Malware payload (Mirai)", "value": "ce417904960a3eece6f2d751cb0d5d4526d9bd3632846216f5eef6f4614b0175", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "8fa836dd-ff2b-42ee-ace4-7b065ca63747", "value": "T144530795BCD28A12C6D422B6FA2E418D372263E8D1DF3207DD216F1177CA82F0DBB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "51524501-de37-458e-8c3d-165ce2fc890b", "value": "1536:4tm3SWBo98R6D1sLBiPE2VrL2yBCtt5Ka5x1VV:4tmzG95NlvYbKa5x/V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351991, "uuid": "7c416936-10e4-43e8-94f9-c852732f875d", "value": 60808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "e088b598-925c-4918-9165-8c7532812bc9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51d32945-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "3fec875b-7f6e-473a-9522-3ead993b0f4c", "comment": "Malware payload (Mirai)", "value": "2280aa5c836ca319bec35314fb6c4718", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "efc1fa14-0182-4507-abe1-cfd82fa4e555", "comment": "Malware payload (Mirai)", "value": "cc1aa88b44b6ca57b028de9705a6f98cb35cf509c21c8e6b46a1ddda924740fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "60172da6-9005-41a4-afd4-43f7a01a2bdf", "value": "T1A6639209BF611FF7EC6FDC374AE91B4525CD641A21A83B397A34D818F24A24B19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "effa7eba-9a48-4ec6-bc42-83cb860b13c2", "value": "768:z5DScD5GY2ne8s2Sxt9yYExR15IR45fTemle5Re5brvuX5XiANe1j9OE:z5DSC5G9eV249FKE4pfl8RWb7Sq1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351991, "uuid": "318ccd05-7baa-4e0a-a20a-427de3a3c753", "value": 71568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "31adede3-8a6c-4a31-8857-8dae3c97c808", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51d70f97-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "eb0569dc-c27a-4e7c-86ec-eb9aa81752e7", "comment": "Malware payload (Mirai)", "value": "3bef90001a37b7175e1856b070862e4b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "35694824-7783-4c13-9672-8a8c98621992", "comment": "Malware payload (Mirai)", "value": "788f9fba2f932671602cf2f3fd480c507640f82340406ccee7f778781c168a8d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "a0969901-3a63-49cd-a63c-30d656b1c3a7", "value": "T15A334A22B87A1E17C0D0F87A62F78729B2F50B0F25A88A5E7D620F4EFF214D0555B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "2a7cd1ba-3f98-4870-a98a-dc498897cf22", "value": "768:cToWb7Qmnahyq9C9Z19G02roQ/7zMR4TAPKOO+hdmHFaR:cT9z5SC9ZjG02roQ/PMRq8hX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351991, "uuid": "d401604e-472c-41d9-980d-77d6692137f8", "value": 54716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "68d02ac0-f4c3-4945-b0df-bba16dc560be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51d77c0a-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "fdb34622-9953-40f1-856d-6645a9fc954d", "comment": "Malware payload (Mirai)", "value": "acb49fc957ab9d933db433f06b3c833a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "69291d31-e9f4-47fa-b626-661b04a8eed6", "comment": "Malware payload (Mirai)", "value": "c3a2f74d49b31dcd4d4371d965e5c39448acf8e2f87afe469f105fc9ae7c9a92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "6fe7ece8-df91-44df-9237-b102849e2e74", "value": "T1C9434DD6B400DE7CF94BEB7A84214A0AFA35722154A30F27B267FD93AC721564C2BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "cb9c3fdc-e15d-4d78-8ad8-0fe3bf2ae5ba", "value": "1536:T5cgor9Y1asetylPku+zCkVnCSQDVY0dI87:d3GssylALxuYS9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351991, "uuid": "0b8fc053-fe2e-4fa6-8bc8-8eda5726d755", "value": 59724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "41d05887-59be-4b70-9287-fd188d0a39b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51d8e54e-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "9845c670-7c48-4ba0-8dd8-14ccc129fd9c", "comment": "Malware payload (Mirai)", "value": "65869836b714dc49a01dcf63675ea0c6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "06b4089c-b7a8-4e61-9044-4556a86a8ffd", "comment": "Malware payload (Mirai)", "value": "2ff2038b6a6e299c63f7ea6997e8998c8d9193740cd48c20875c814b6bc967e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "461543c3-88b2-4390-86c1-53e7867c9dfa", "value": "T18173940E2E619FBCFBAD863587B34E209248339626E1D545D19CFA011E7034E746FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "1bef1329-6350-482e-a910-471597013f09", "value": "1536:b4Z8VUay6+vl/R1KIdysUmR9EiYHXwgNNN96MMFjDETBK:M6Zy6+vdGIdysUKoNN97MNDIBK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351991, "uuid": "0f335b06-c5e6-42b2-94a2-6dc13b7f685b", "value": 79804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "1b3412ca-3280-45bf-a9e3-fec5b10f4913", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51d8fea7-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "e52d70d5-9688-4680-93c5-01e4c34429ce", "comment": "Malware payload (Mirai)", "value": "ef9ef54f8f8e3d101898acfef338596e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "74352d4b-6c8f-4942-8558-c499e2543027", "comment": "Malware payload (Mirai)", "value": "84f21eeb6007440116867f03cef55d2394f53c35521e10a63fc4531ef6778cb8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "e850e9ca-3419-46a8-abcc-363e45f6c829", "value": "T199234CC5A547D9FCEC190A712177FF319AF6E83E1158DA83C359AD72E942602E9032", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "49fe9a1d-5081-4a49-95d2-0a0cd09b3907", "value": "768:r+WtjNuFWuttPEszMmsdybV/co8NCSSWfd/046SDZkQoI:r+cUttPEsImsduV/c0WV/046OZk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351991, "uuid": "fc0c56ad-ee66-482d-8673-37558a6a9df5", "value": 49756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "19de83f7-7813-435f-8ec5-dae75dfbe6a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51d91831-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "c598a2dc-442e-43dc-abe2-07638ab6eec6", "comment": "Malware payload (Mirai)", "value": "eb95189fbbc7df433f67bbda56382e7f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "8245dfc7-cfeb-4715-b5cb-b49c1ce4b0b9", "comment": "Malware payload (Mirai)", "value": "454c43282092e21f5471cf3aaedce6eeaef54216508a4104db773f058daa32fd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "c4ca5727-744e-4f55-9068-39e477c3a9cd", "value": "T1893318D6B401AE7CF95BEFBE80224909F531621151930B3B637BFD936C322A58D62D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "817e8ed5-8a1b-4c35-8967-021d1a8fcbff", "value": "1536:pUrztlv7LlNvYOJAPz0CH7n2q/CVX5/9r8c:pU7lFYT0A7UX51n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351991, "uuid": "ab91ccb4-eb0e-4c34-814f-2ddb64130ee1", "value": 52500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "e002c81b-90cf-47b2-95b2-56d3dff402eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51dab6c0-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "66e6125c-16a4-418c-90c8-3a6ab11a57d0", "comment": "Malware payload (Mirai)", "value": "3b0d2aa6fa7ef1e00e06d46f614250b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "9599a94e-05a1-4feb-9f12-7d6087b29a4b", "comment": "Malware payload (Mirai)", "value": "a76031c924c887fabd580f9decc3b92d009a183a876c495715ae37d29ce2d06b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "5305d6a0-2525-4005-9bc7-407116729313", "value": "T1AC73A31ABF610FF7E86FDC378AE91B45248D641A21993B7A7D34D418B24B24F49E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "3475e06b-9457-4a28-a1c8-32fb558ba100", "value": "1536:5Y2Vu+dSm1BJRc4gRGUUpuoB8DuPSwteQHBX:5nVu+dSuBLgRGlpDe8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351991, "uuid": "7606a69c-37f9-453d-ba22-1d65980ef4e0", "value": 79868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "9530747c-5044-4e2a-898c-4e3990c73b65", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51dbcf92-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "30c16e2c-40e1-4890-95df-e8b4c68c0174", "comment": "Malware payload (Mirai)", "value": "09b9cf101f84b7a91a253264ac418707", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "a880d8c0-a352-43f5-820b-a379762b8ad7", "comment": "Malware payload (Mirai)", "value": "04d67de45346062439225daeb849e182f8b382a4f1db9bcb9b68492081bd8cc1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "82e5413a-3b89-414d-b0c7-4eed7ea65895", "value": "T134436A0272280A47E1621FF4293F27E083EEE99121F4F588660FDA468275F77158AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "26e1c1c5-2292-436a-980c-7255ce12e38e", "value": "768:UapBtbSHgJiWrrrP2ijRYBaRTVEMorVnWkCxDqfMyGCGEg3s3f/3xpttZAIsYsB1:U/AgWZjRYIarFW3TyGTJ3s3fXFDsvx5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351991, "uuid": "a42c6967-d266-4720-a5f8-a394dba8b29c", "value": 58284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "4a3053d6-ae18-4d2f-a02e-f628bb879788", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51dc510b-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771351991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "a7064b2a-2e83-4fb5-82ff-bec26c7fd04b", "comment": "Malware payload (Mirai)", "value": "a788a73acf63febeb6fe2da3d55765d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "16cbe938-d89c-4675-9a50-3b3419e62abd", "comment": "Malware payload (Mirai)", "value": "b51d6c23a152d9551e076bcfd36f70d6a1f48343394c12d37ada451e39f56a6d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "be0cac9e-3453-46e5-bae0-8256c2b8b489", "value": "T19D534A22A8792E17C0D5F57B22F78328B2F5170E24A8CA2D7C760F8EFF1895065576", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "b3fc7007-422a-4443-96d7-664f5fd289a5", "value": "768:4SoA7YUFoWq9XgOpo7bDk4oIVT+eJPdIei2pM6WlxOO+hBCAFEI:4SBYEJSXgOp6bQ4oIVTXJPdIr8hH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771351991, "uuid": "9587fde7-f87f-4bfe-a8ff-d417661fefc9", "value": 62476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351991, "uuid": "fd196b2c-a8f9-4a90-863a-48c820d89cae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0247b44b-0c2d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771352287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352287, "uuid": "44ff9374-1c15-4db4-a356-6549ea0f2e49", "comment": "Malware payload", "value": "6cb739a85ad491a75795998b25fd2801", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352287, "uuid": "ab774040-b6fe-455f-bf5c-840e40732c04", "comment": "Malware payload", "value": "644214f34274db1a6c655f309c0e6998071c4a70b8cbd4619bb7c31febbf7289", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352287, "uuid": "e86e33ee-0fba-4777-98a8-39dcba51988e", "value": "T107059D2BB2B2B27DD017C03047DBC6725132F4756A322D7B26C4DA343E96DE9176AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352287, "uuid": "388110bf-5af7-48e8-b142-97c89823d838", "value": "12288:tHenNgrNhQKCAW1oHd9H42Fm8H6dlUGvayE8baHXMmhXcr53U:tmNgBhQKrWSbH6dlUAWXcr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771352287, "uuid": "2c30385f-9144-4cbd-a12a-1748f38c5237", "value": 795976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352287, "uuid": "f1339b55-3f10-4ce4-bd27-e106d235db3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "024817b7-0c2d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771352287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352287, "uuid": "db4f6939-c15a-47e7-be96-e3343d2385cc", "comment": "Malware payload", "value": "90e09b2fbae8aa4139ad3b303debc714", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352287, "uuid": "829c0256-4959-4901-9342-486d624345be", "comment": "Malware payload", "value": "ea556ef715955c5cce3fb915a512e2b4fe1eadff07ab5cc7caa50de65aeead25", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352287, "uuid": "c9c8747d-e18c-4665-9c38-672205185eb6", "value": "T153E45C42FB1C4563D9430EF129BF43D5F7257A4341F5922A370E9B672621E3A9AC33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352287, "uuid": "a9b4ed61-6188-41de-b81a-5c41841fc44c", "value": "12288:PSTgHJGk6gpoi0MiipF8ayh9pq+Tip/YvvPccAcqnGFe0PcvQG:PS3k9poi0DMFBE94+hvPccAT00v/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771352287, "uuid": "669cb453-9ee1-4738-aa14-39eb49daf820", "value": 715964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352287, "uuid": "994d9ee2-3141-48cf-8c8b-5bd3355fa7e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0248bad6-0c2d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771352287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352287, "uuid": "bb6a6d27-cc56-4152-b9f6-95596a4c4d7e", "comment": "Malware payload", "value": "8edce910ad3d7b58436dd95fb54e8733", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352287, "uuid": "0427a931-b8f6-4697-ade4-03bbd0924ab1", "comment": "Malware payload", "value": "f18bc153b2acaa5e725ca8e9837ec1a4a7f10dc70cb87495fccbc354030ba1df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352287, "uuid": "7555305d-148a-4934-b5f2-3078a238fa7e", "value": "T137C44A16F8809F62C5D1257AF65F82A8731347B8C3DB720699189B343BE786F4F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352287, "uuid": "b649429a-96e4-4778-b259-81befb797601", "value": "12288:iJC/dOfQyLgvok+8T/MXDa8IgpdtncCdNQdBI88:iJEOIyLgvoEUjhdydBI8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771352287, "uuid": "3a4b0cf9-b522-4d89-a0c2-bbbc83ecf55d", "value": 559552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352287, "uuid": "3dc1e0ee-72e4-4a53-a43e-d4c42f12fe7e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0249c589-0c2d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771352287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352287, "uuid": "88720958-4371-46d3-a239-47a7805af511", "comment": "Malware payload", "value": "2ecf2d4a353e0487904e3c8b3f14bfcc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352287, "uuid": "e0e2d2c4-94a4-4679-b6f9-f95172e2b99e", "comment": "Malware payload", "value": "0ed40d59d0248497a4ded2d4654c77f2e566dc3a9307e2bcb49c70765aeadd03", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352287, "uuid": "61973757-56f5-44f1-a3c2-d091595ae78e", "value": "T184D58D17BCA404E9C0AA973289A696967B65FC090B3023D73F50B67C3F72BD09E797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352287, "uuid": "bf33ea34-9cfb-45aa-b16e-1c0fa30bb62e", "value": "24576:OuZYK5iz1eflzbNKDkM9fILiNuo5Wp8gQoAvVb86hr79eyY2zirGt5PGtQfi83VY:OIYKgzklfXMV/g418Sr79/L3Gef9Wg1Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771352287, "uuid": "42f1a9a5-d168-49e7-980d-023bb5fb5060", "value": 2903431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352287, "uuid": "bd560eee-e48a-4f5e-9e12-fab05ed65e48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "088a54ab-0c2d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771352298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352298, "uuid": "b78e3f42-e74f-457f-9492-82ee779a3f06", "comment": "Malware payload", "value": "998a87f5cf5e5b7d9fae5eba1917f85b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352298, "uuid": "b677ffea-a84b-4ef1-887c-dd94a74c91e9", "comment": "Malware payload", "value": "093a1407b129efdb0e06c1123fbead214465ac24da3ff29b7a20890a3d7be0a4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352298, "uuid": "0c5ab1cb-a347-4372-bad3-618684a4c0bd", "value": "T19FB4CF53F7A0ADA6C4A74B75447BD2304347D2821383F342F6AE86442C6B66DFE6E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352298, "uuid": "2f88d5e9-e32d-4fcd-99c8-d9c1396fbb4a", "value": "12288:CpZhs2rpVh8MieAvNUI4yECBgeBYQpdEupwOAfv9:CTJ9Vjq8yTV9Afv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771352298, "uuid": "3009c039-212e-4a56-87ed-a12aad90d334", "value": 518788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352298, "uuid": "b70ed75d-18b6-4c83-a9d7-54a5b2d4c9a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0891d368-0c2d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771352298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352298, "uuid": "7d8e6b4d-ce34-4761-860a-1c1c8b39fd34", "comment": "Malware payload", "value": "c3901fee3c48a0e29df4a6c3f42c9b5f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352298, "uuid": "2678cf02-08db-4c3b-8f1b-bc42c1dfd2ef", "comment": "Malware payload", "value": "fbc49d7bb117ba053953227552f77707549fd66234a23fea8900159bbebb302a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352298, "uuid": "452f3903-6782-4099-a379-ca46a657d807", "value": "T1F7E43B02AF915FE7C49FCD31496EC31611EDD88386C1A72A71FC8B4DBA9D35A0AD35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352298, "uuid": "ddc0a385-f5b5-4c8e-89d2-dbeeb50103b8", "value": "12288:XO0oOudHMFB4HhlNWRRjfVvdBW7PV1Z9eenQZv88xcxljbH1dlS33CfOwE549yAS:sMFB0h2QfZ0Sb9tnu3mJ6haZt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771352298, "uuid": "9fee3814-9627-426e-add2-feeabe8890e6", "value": 681436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352298, "uuid": "94649d32-9f52-49aa-9d52-26bf036ff1ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08a6d0ab-0c2d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771352298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352298, "uuid": "d143cea5-3e7c-4253-8e63-f4cc20038c51", "comment": "Malware payload", "value": "bf1d58dd571410950e74d9cd0f96e6d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352298, "uuid": "f88b0a46-1428-4ba5-a148-84018768bd6d", "comment": "Malware payload", "value": "827f2f959b054e460f58eacf5a421f7990821549145808245a298e48cbca8ea9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352298, "uuid": "65fbc937-3aca-4ec0-a338-76b2b21636f1", "value": "T173E46B227B21DFA5E355D63009F3CA514AF121A207E24486726CC7287E11A6E6E5FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352298, "uuid": "19872773-0b50-4b04-888e-a1b629038373", "value": "12288:PYlsmW7rAoHj8kJuuvs44mG6UC79oWXGgpdgOWm5i6yOaZtW4:PYlsm2jhw44mG6UuvNWPuaZt/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771352298, "uuid": "d3d935d2-508a-4751-82f7-9a64cd8ad83b", "value": 681436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352298, "uuid": "d348df5c-a787-4af9-88eb-3bcf5d6ec95c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6229d9e4-0c2f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771353307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771353307, "uuid": "a7701fa3-eaaf-49b6-8c85-73e9ef1c0c31", "comment": "Malware payload", "value": "7baf73affb448095b2546a00e138a090", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771353307, "uuid": "dca50470-0088-4644-abef-2f1448f43814", "comment": "Malware payload", "value": "f9379841a073f7e25db5680b359a9b7ad5a006a23599a55e98569db5e590200b", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771353307, "uuid": "865e1789-22ee-4165-89ad-e49f299a97ab", "value": "T171E28D60174DAAA31C2E8FD61695C4CAED37EA6771D2CC6CB2AE64CF5F38C4D50899", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771353307, "uuid": "846978f3-e25e-4d60-8397-7ba3e33fdbb6", "value": "768:cWkwC1ywCFwwCkwCFyeLb8wZGdlUhbi6wCRwCD8wCk2nQ:cWYGXFLowZGgik2nQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771353307, "uuid": "979d01ea-6d09-496b-8562-bcaec2eb5c61", "value": 31323, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771353307, "uuid": "d4837544-f5f9-44a0-afd3-998e1e8efa21", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6574536-0c31-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771354280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771354280, "uuid": "e3d6571c-180d-4435-a03b-819e0ca6c7a8", "comment": "Malware payload (Mirai)", "value": "7e4720044f4f48d0aa8975e8c5026659", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771354280, "uuid": "52ea5c92-a4d9-4ebf-8d6f-9b38f25f8455", "comment": "Malware payload (Mirai)", "value": "28e56049acc628b29d70f4f6b7e206621a821f58072afd115c524416c9c84435", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771354280, "uuid": "cd3f2e7b-f1f2-4567-9d47-94c2544ff45c", "value": "T1BBB3D91E6E21CFADF369C23587B78A21A75833C626D1C685D27CEA011F6034D245FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771354280, "uuid": "75825859-a425-497b-9bf9-6c05c9f125ea", "value": "1536:071cSXpDd5Ncrg1ntj4qVIwxKCxKzeK8CXYqrQuFxhrdnHDeCWWyEWNn3Ull:61ZZd5NcrdnzYqrQuFXdnHcWyEgn3U3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771354280, "uuid": "9c6f9394-abe1-4b47-b48f-b2f49be3afa5", "value": 110388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771354280, "uuid": "a106de01-1c08-4ff5-8ead-6a4bb9516c49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b17b4fa8-0c34-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771355588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771355588, "uuid": "d60f5686-5d6b-47e2-bfc1-1d701111f8b8", "comment": "Malware payload", "value": "8721fb9ace5a6127c2e01d915b7d4387", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771355588, "uuid": "d20369fe-7730-4feb-aec4-258b92467385", "comment": "Malware payload", "value": "ad573c56d6f900b989f53b2e30080213334372b6686ab052bcb25917246041bd", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771355588, "uuid": "bbd2eb1d-dcb1-41ff-b3b0-6fc335ba2604", "value": "T143D10B41EF40B2C1B392B75BAA5631C3C07D7C5976A02CBFE01AA01C706A726B58D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771355588, "uuid": "300b9121-57f5-4478-97c7-ff215ac0555b", "value": "192:QkXgcN8kxngIAib2gpfQDfIQQcnqdi+PKJD3WKfKBj1nSP:ZvN8kxngIvb2gRQDfFhnqdiX9fUj1nSP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771355588, "uuid": "0a04d24d-8555-4201-91ea-e99676a9c943", "value": 6751, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771355588, "uuid": "ffcddb9f-031b-4d1b-b7f0-897a849338e5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1771356261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356261, "uuid": "05e358bb-2237-4c5c-8387-c8d4f1a04c84", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356261, "uuid": "77a52ee9-409c-4a5f-9623-f6caa9edf1bd", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771356261, "uuid": "efb9936e-6df5-4cd3-a4ac-f6f48b948748", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771356261, "uuid": "f602e5de-4ba7-48f0-8c9a-6ece59bf19bd", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771356261, "uuid": "4fb81d9c-6547-428e-9020-cba200601485", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f2ac315-0b3a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771357016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771357016, "uuid": "cb70d659-c2b4-47e3-9273-4c27a93dee33", "comment": "Malware payload (Mirai)", "value": "c6287772973a69eccf8d0eee1a7183f8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771357016, "uuid": "ad0703b5-a99e-4a97-ba2e-242f24072b93", "comment": "Malware payload (Mirai)", "value": "e77b92e6a48b0db91fa71a25942b9944cd9e954413c87ef00b65a4e48e4d0757", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771357016, "uuid": "4128d5ad-0507-435c-bf4a-21accdc774c9", "value": "T1DEA33989F98BC0F5C90B8930906AB63FDA31DC7940719B99EF959F35DA33AC193123", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771357016, "uuid": "b2eccf6d-9c0c-45cc-9757-b9cd9d61afbf", "value": "1536:IRlSO46rQk0U51o2bKJwRiLtlR6S/VAuFZyS9lXWgiq7xqRWCKWAp7bIZo:IRBQbUk+ihbd/VFFZySenq7xqECEIK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771357016, "uuid": "5f4cc53b-8b45-4022-8f79-7c2748b728fc", "value": 103700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771357016, "uuid": "c312833b-67f4-4568-bf00-4c1b9c713ac9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771358781, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771358781, "uuid": "7f3e2d92-fc20-4eef-ad18-50414cfdb9a4", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771358781, "uuid": "2fa9dcb0-d270-4118-8b5e-2e38bbbd212f", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771358781, "uuid": "da2aee77-adc5-48fe-9f99-27a945ff029e", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771358781, "uuid": "08a711c8-cd6e-4781-97d8-b8dace58eff1", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771358781, "uuid": "9ce4212c-a8dc-4124-818c-d089ffde8feb", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286526, "uuid": "e593c2fb-0b93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.200.25.151:38812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "0b5743f1-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.126/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "0b626a1f-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.126/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286589, "uuid": "0b6664c8-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.126/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286590, "uuid": "0b719d12-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.126/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286590, "uuid": "0b73b40b-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.126/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286590, "uuid": "0b7a08a7-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.126/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286590, "uuid": "0b7c346c-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.126/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286590, "uuid": "0b825ac8-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.126/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286596, "uuid": "0f539d27-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.126/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286596, "uuid": "0f557b92-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.126/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286597, "uuid": "0fbd7560-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.126/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286657, "uuid": "3399c90f-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/ntpd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286657, "uuid": "3399dac8-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/pftp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286707, "uuid": "51406ed5-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/cron", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286716, "uuid": "56970dbc-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/openssh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286721, "uuid": "59966310-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/sshd", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286776, "uuid": "7a5f0306-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/sh", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771286885, "uuid": "bbcc2e92-0b94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://goldenapple.runtime-error-handler.coupons/handler", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771287147, "uuid": "57ca5d1f-0b95-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.121.105:40898/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771287315, "uuid": "bc029704-0b95-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.11.227:52989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771287432, "uuid": "0185a933-0b96-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.148.18:53709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771287510, "uuid": "301fbb5a-0b96-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.212.137.244:59659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771288025, "uuid": "6340164b-0b97-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://wildriver.runtime-error-handler.coupons/handler", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771288266, "uuid": "f29088b5-0b97-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://smartcloud.sandbox-proxy-diagnostic.coupons/handler", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771288688, "uuid": "edf79f4d-0b98-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://redstone.sandbox-proxy-diagnostic.coupons/handler", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289003, "uuid": "aa1356cc-0b99-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.212.137.244:59659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289046, "uuid": "c35f2fe1-0b99-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://freshbreeze.sandbox-proxy-diagnostic.coupons/handler", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289363, "uuid": "804b1177-0b9a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.249.70.74:45988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289659, "uuid": "31051d05-0b9b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.148.18:53709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289837, "uuid": "9b61c84c-0b9b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.81.96:34057/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771289890, "uuid": "ba7cb0dd-0b9b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.5.132:58209/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290257, "uuid": "95a98708-0b9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.214.185:35673/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290428, "uuid": "fb7e6d2a-0b9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://darkriver.swiftmotion.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290463, "uuid": "1061384e-0b9d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.5.191:50743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290665, "uuid": "8891ecea-0b9d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://fastsky.swiftmotion.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290862, "uuid": "fdbf936a-0b9d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.64.147:58222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771290911, "uuid": "1b061210-0b9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://openfield.swiftmotion.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291086, "uuid": "83b3852b-0b9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://citylight.urbanharvest.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291278, "uuid": "f61fa963-0b9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.10.84:48539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771291515, "uuid": "834554ad-0b9f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.192.158:49107/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771292598, "uuid": "09052f81-0ba2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.11.227:52989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771292716, "uuid": "4ef589c7-0ba2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.0.110.104:40834/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771292716, "uuid": "4efe39cd-0ba2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.234.115:57451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771293313, "uuid": "b330bdd9-0ba3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.56.152:52450/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771293431, "uuid": "f9718c80-0ba3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.159.45:35631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771293919, "uuid": "1c586a37-0ba5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.250.40:43577/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771293920, "uuid": "1c9c2b19-0ba5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.123.77:57204/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771293982, "uuid": "41a1d67c-0ba5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.5.191:50743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771294325, "uuid": "0e3cd8df-0ba6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://greenpark.urbanharvest.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771294396, "uuid": "388f1cd4-0ba6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.159.45:35631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771294457, "uuid": "5cb11122-0ba6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.112.66:39252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771294635, "uuid": "c6dbea10-0ba6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.10.84:48539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771294866, "uuid": "508af641-0ba7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5926060486/MKktCIh.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771295060, "uuid": "c44dced3-0ba7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.170.238:37915/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771295732, "uuid": "54cb646e-0ba9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.56.152:52450/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771295777, "uuid": "6f66eb00-0ba9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.210:39284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771296676, "uuid": "87709fef-0bab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.32.27:44224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771296730, "uuid": "a7668436-0bab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.106.148:42746/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771296822, "uuid": "de3b422a-0bab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.102.23:53800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771296972, "uuid": "38079404-0bac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.209.57.38:43481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771297578, "uuid": "a1385c3b-0bad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.210:39284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771297686, "uuid": "e15a0e49-0bad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6691015685/KoC0dj3.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771297938, "uuid": "77e00a6f-0bae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.209.57.38:43481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771298056, "uuid": "be03ef6a-0bae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.122.34:41641/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771298237, "uuid": "29f9d28a-0baf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.246.17:58364/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771298536, "uuid": "dc50c3b9-0baf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.196.88:56417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771298955, "uuid": "d5ea0286-0bb0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.163.19:37768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771299495, "uuid": "178111ef-0bb2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.131.163.246:47476/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771299796, "uuid": "cad23fd5-0bb2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.122.34:41641/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771299981, "uuid": "3925ac4a-0bb3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.7.10:50146/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771300147, "uuid": "9c938388-0bb3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.163.19:37768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771300149, "uuid": "9d652d73-0bb3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.86.233:60459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771300929, "uuid": "6e63c276-0bb5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.196.88:56417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771301003, "uuid": "9a3f8ccc-0bb5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.75.104:58925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771301587, "uuid": "f6debd55-0bb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.26.48:35424/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771301589, "uuid": "f7efad7a-0bb6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.104.219:58525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771301896, "uuid": "aedac261-0bb7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.86.233:60459/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771302371, "uuid": "ca253161-0bb8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771302372, "uuid": "caa94439-0bb8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.151/arm4", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771302694, "uuid": "8aa03d5e-0bb9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.121.97:60193/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771302790, "uuid": "c3e6dd2e-0bb9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.44.42:53120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771302792, "uuid": "c519fa5f-0bb9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.182.190.167:54225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771302851, "uuid": "e7f19b34-0bb9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.52.48:43714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771302864, "uuid": "efa2ec21-0bb9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.104.219:58525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771302868, "uuid": "f1effa5a-0bb9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.145.206:60446/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771303934, "uuid": "6db21815-0bbc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.52.48:43714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771304058, "uuid": "b7bcc566-0bbc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.224.137:52147/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771304354, "uuid": "67b9a90c-0bbd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.68.195:53452/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771304355, "uuid": "687f3f20-0bbd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.145.206:60446/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771304527, "uuid": "cf460afa-0bbd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.249.211:51247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771304588, "uuid": "f32882cf-0bbd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.68.195:53452/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771304657, "uuid": "1c9670ec-0bbe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.117.128:51507/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771304767, "uuid": "5e15e4f4-0bbe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.46.244:51189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771305077, "uuid": "16fdca88-0bbf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.121.97:60193/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771305738, "uuid": "a08ccee6-0bc0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.117.128:51507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771306282, "uuid": "e518dbc4-0bc1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.2.185.219:55700/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771306392, "uuid": "26cf0a66-0bc2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.26:51124/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771307531, "uuid": "cdc00b7a-0bc4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.212.36:54977/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771307708, "uuid": "36c3dd35-0bc5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://oldbridge.urbanharvest.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771307947, "uuid": "c56440c3-0bc5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://coldwind.silentpeak.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771307957, "uuid": "cba5a5a2-0bc5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.2.185.219:55700/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771307958, "uuid": "cc41024d-0bc5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.146.227:52454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308073, "uuid": "1077e4a6-0bc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.26:51124/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308073, "uuid": "10a93d3b-0bc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.143.34:60384/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308399, "uuid": "d2ec9318-0bc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.2.220:34591/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308437, "uuid": "e9c0d81e-0bc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.231.86:59540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308727, "uuid": "96acc115-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/boatnet.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308728, "uuid": "96ed1f35-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308728, "uuid": "96fc244f-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308731, "uuid": "98c5df95-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308731, "uuid": "98c5e02f-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308731, "uuid": "98c87172-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308742, "uuid": "9f5a9b11-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308752, "uuid": "a523f315-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308752, "uuid": "a523f318-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308752, "uuid": "a52453fa-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308753, "uuid": "a602e355-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/boatnet.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308753, "uuid": "a6031861-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308753, "uuid": "a6040ae9-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308753, "uuid": "a60c8aea-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308756, "uuid": "a7a0f1de-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308845, "uuid": "dce84f11-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://highstone.silentpeak.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308859, "uuid": "e524de2e-0bc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.237.47:46581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771308920, "uuid": "097e1533-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.212.36:54977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309167, "uuid": "9cf29f25-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.73.117:39482/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309268, "uuid": "d8ee429f-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.66.153:50337/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309273, "uuid": "dbab9a42-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.34.247.103:25487/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309273, "uuid": "dbe3c930-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.184.80:45879/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309273, "uuid": "dbfbce05-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.184.80:45879/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309273, "uuid": "dc0b3c6a-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.37.228.2:50775/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309273, "uuid": "dc12e794-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.119:47047/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309274, "uuid": "dc4f6188-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.76.32:37037/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309274, "uuid": "dc57674a-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.47.15:50435/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309275, "uuid": "dce38a77-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.119.220:55154/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309285, "uuid": "e306cf4f-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cyxt.technok.sbs/Cyrex.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309287, "uuid": "e44c5332-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.149.26:59446/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309290, "uuid": "e5f58326-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://sunwukongs.com/sunwukong.exe", "Tag": [ { "name": "EternalRocks", "colour": "#5d3ff1", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309290, "uuid": "e62b499c-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunh.technok.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309290, "uuid": "e63302cd-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cyxr.technok.sbs/Cyrex.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309297, "uuid": "ea5a3b24-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.101.107:35099/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309316, "uuid": "f57c2f53-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunr.technok.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309325, "uuid": "fb14eb23-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bore.pub:55593/GuruITDDoS/RpcSecurity.mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309326, "uuid": "fb79c4b3-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.56.149.224/cacti/ns2.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309327, "uuid": "fbcb844f-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.96.103.174:42851/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309327, "uuid": "fbcdb4da-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.96.103.174:42851/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309327, "uuid": "fc208a67-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309327, "uuid": "fc283e0f-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.119.220:55154/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309327, "uuid": "fc379976-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.119:47047/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309328, "uuid": "fc91c949-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.76.32:37037/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309328, "uuid": "fcb33c69-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.81.20:53081/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309328, "uuid": "fcbc7f04-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.236.180.235:53923/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309328, "uuid": "fcbd22c7-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.81.20:53081/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309328, "uuid": "fcd809f8-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.130.11.124:42409/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309329, "uuid": "fd204963-0bc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.238.254.10:62267/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309340, "uuid": "039943fb-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.34.137:45771/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309340, "uuid": "039ab601-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.149.26:59446/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309340, "uuid": "03c01f90-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.227.63.158/cat.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309340, "uuid": "03c302cd-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.118:444/test.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309340, "uuid": "03ff432c-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.14.252:57087/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309340, "uuid": "04022bd4-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.140.219:47653/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309340, "uuid": "04040c0d-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.219.38:50791/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309340, "uuid": "0409b092-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.208.39.43:55734/.i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309341, "uuid": "042344a7-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.140.219:47653/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309341, "uuid": "04253104-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.72.182:48075/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309341, "uuid": "0434b5dd-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.126.13:37233/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309341, "uuid": "0434b68d-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.86.132:48267/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309341, "uuid": "0435a6d2-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.232.14.252:57087/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309341, "uuid": "0470c37a-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.86.132:48267/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309344, "uuid": "06510860-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.143.34:60384/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309345, "uuid": "07081cae-0bc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.34.22:57190/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309808, "uuid": "1a78944e-0bca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://deepblue.silentpeak.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309876, "uuid": "43534714-0bca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.231.86:59540/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771309877, "uuid": "43ada2da-0bca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.237.47:46581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771310120, "uuid": "d4fb21df-0bca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.143.171.155:57100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771310348, "uuid": "5ca07666-0bcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://newidea.boldvision.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771310421, "uuid": "87e71670-0bcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.73.117:39482/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771310421, "uuid": "881b4f4d-0bcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.168.238:51481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771310840, "uuid": "821ea988-0bcc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.190.31:51015/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771311027, "uuid": "f18bc100-0bcc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.170.237:38303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771311487, "uuid": "03716aae-0bce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://smartstep.boldvision.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771311510, "uuid": "111e2d31-0bce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.160.12:51490/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771311735, "uuid": "97531585-0bce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.170.237:38303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771311786, "uuid": "b5e725a4-0bce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://clearfocus.boldvision.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771311930, "uuid": "0bc3599a-0bcf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.234.46:42333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771312347, "uuid": "042705fb-0bd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.122.20:36197/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771312466, "uuid": "4ad19f55-0bd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.190.31:51015/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771312466, "uuid": "4b435bc8-0bd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.26.172:46073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771312569, "uuid": "88602d48-0bd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://winterland.frozengrove.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771313286, "uuid": "33b918fa-0bd2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://puresnow.frozengrove.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771313384, "uuid": "6df8adb9-0bd2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.11.50:57927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314308, "uuid": "94fc6f3c-0bd4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://iceshore.frozengrove.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314368, "uuid": "b87a276e-0bd4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://au72nuxzv2.ufs.sh/f/4LhV5B1sDCwIUzWosCHxqzi5dKsBlFcjPM270Sp84XJDZWoy", "Tag": [ { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314427, "uuid": "dc253f74-0bd4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.211.208/yulastxxx.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314430, "uuid": "dd74b19a-0bd4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://my-do.s3.cubbit.eu/donn-dcv4.8upload%20(5).txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314489, "uuid": "010c1101-0bd5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://imustgetlogsooo.site/.tygahhh/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314491, "uuid": "01cf52f3-0bd5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bvaco.com/arquivo_20260217025642.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314547, "uuid": "238a73b4-0bd5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.197:5124/3/ENCRYPTED.ps1", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314548, "uuid": "241a1e22-0bd5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://taxandmoreinc.net/ENChRYPTED.ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314550, "uuid": "24fa3902-0bd5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastaco-ca.com/phant/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314609, "uuid": "489d6219-0bd5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://secretdoor.hiddenpath.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314725, "uuid": "8da17c9b-0bd5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file/48msgc60kmmhvrx/", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771314918, "uuid": "00b38b9f-0bd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.84:37349/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771315086, "uuid": "64e50ece-0bd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lostforest.hiddenpath.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771315268, "uuid": "d159bb5d-0bd6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.68.140:43045/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771315746, "uuid": "ee3c1461-0bd7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/w539fqxeew7p4tooxymd5/gmail2.7z?rlkey=zn6g84a8m8qho4d0oxtwedq8l&st=3kkgnssr&dl=1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771315868, "uuid": "3686b2f1-0bd8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.techlearnskill.com/ttttt/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771315924, "uuid": "586e564f-0bd8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://res.cloudinary.com/depimmwx8/image/upload/v1770578414/MSI_PRO_with_b64_tvu7as.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771315939, "uuid": "614b55e2-0bd8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://mnurlogistics.az/imq/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771315987, "uuid": "7de7f414-0bd8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://minel-lights.rs/arquivo_20260216233403.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771315988, "uuid": "7e0f21e5-0bd8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://uniworldrivercruises-co.uk/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771316045, "uuid": "a037b938-0bd8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://minel-lights.rs/arquivo_20260217003911.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771316059, "uuid": "a8bf048a-0bd8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.46.46:57061/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771316178, "uuid": "efa97a47-0bd8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.228.208:45958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771316766, "uuid": "4e28c223-0bda-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.68.140:43045/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771316827, "uuid": "7246645e-0bda-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://longway.hiddenpath.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771316829, "uuid": "7367ff9f-0bda-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://m9jn8b8q.ostroy56sagacious.digital/?=check&&actmn=uNPxnryPMUaYwcrS", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771317195, "uuid": "4df10ae8-0bdb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.113.11:37596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771317621, "uuid": "4bb90c92-0bdc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.219.233:54362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771318572, "uuid": "82c62f14-0bde-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.77.133:45933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771318819, "uuid": "15c02988-0bdf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.249.78:59942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771319045, "uuid": "9cb5901f-0bdf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://softtouch.velvetroad.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771319588, "uuid": "dfec0a5b-0be0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://redcarpet.velvetroad.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771319771, "uuid": "4cf9ebbf-0be1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.200.229:52015/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771320075, "uuid": "028363ad-0be2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.234.115:57451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771320486, "uuid": "f787a340-0be2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://smoothride.velvetroad.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771320552, "uuid": "1e868476-0be3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.193.22:52172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771320552, "uuid": "1e96ddbc-0be3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.249.78:59942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771321150, "uuid": "8300f856-0be4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://strongmetal.ironpulse.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771321328, "uuid": "ed70ba18-0be4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.173.202:32870/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771321389, "uuid": "116593e1-0be5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.232.18:40543/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771321627, "uuid": "9f89d889-0be5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.202:48199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771321695, "uuid": "c83bca75-0be5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.163.48.188:34557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771321927, "uuid": "5271ab5c-0be6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://calmwater.gentlewave.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771322649, "uuid": "00640699-0be8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.122.141:49760/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771322957, "uuid": "b84c9e64-0be8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.163.48.188:34557/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771323067, "uuid": "f99e3fd8-0be8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.83.168:51090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771323197, "uuid": "475bc46a-0be9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.202:48199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771323315, "uuid": "8dc1e20e-0be9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.83.168:51090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771323428, "uuid": "d0c84589-0be9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://summerbreeze.gentlewave.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771323859, "uuid": "d1b47320-0bea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.152.190:42309/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771324219, "uuid": "a890aed2-0beb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.19.253:42525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771324686, "uuid": "beb58f40-0bec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmshore.gentlewave.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771324940, "uuid": "55d5e0d9-0bed-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.169.241:49936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771325354, "uuid": "4ce9d014-0bee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.9.224:44859/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771325653, "uuid": "fefca6ce-0bee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.19.253:42525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771325953, "uuid": "b1fca018-0bef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.9.224:44859/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771325955, "uuid": "b334103f-0bef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.220:60542/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771326847, "uuid": "c6b5423c-0bf1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://wiseword.brightminds.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771326967, "uuid": "0e921bf5-0bf2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.24.142:46616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771327515, "uuid": "54fb487d-0bf3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.220:60542/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771327566, "uuid": "73719b06-0bf3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://futureplan.brightminds.coupons/chromesetup_x64", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771327817, "uuid": "08f0cf9d-0bf4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.200.13.91:38927/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771328350, "uuid": "4683cdf6-0bf5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.200.229:52015/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771329079, "uuid": "f90ea655-0bf6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.103.0.93:39954/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771329188, "uuid": "3a64f121-0bf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.41.44:39660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771329427, "uuid": "c8c3b00c-0bf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7191289317/hcH5XnB.msi", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771329487, "uuid": "ec0c1d18-0bf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gi9d0czb.serve5woodman.digital/?=check&&actmn=MurVfDVrgkUAzGMV", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771329492, "uuid": "ef66621c-0bf7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.25.119:54066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771330099, "uuid": "58dbed0e-0bf9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.140.175:39065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771330103, "uuid": "5b9d717a-0bf9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/ubecyzRb.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "e3db0b", "colour": "#c7deaf", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771330397, "uuid": "0ad0d28d-0bfa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.25.119:54066/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771330749, "uuid": "dc850c92-0bfa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.118.153:33969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771330755, "uuid": "e04745dc-0bfa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.103.0.93:39954/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331164, "uuid": "d41085b8-0bfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://agitate6vagina.digital", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331167, "uuid": "d57bc058-0bfb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://agitate6vagina.digital/", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331415, "uuid": "698db18a-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.106.115:37834/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331466, "uuid": "882bf00f-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.248.150.199/zfDAitnpyIXInbUYfsLtAD194.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331467, "uuid": "88587f81-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.243.109.247:9999/svc32.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "marte", "colour": "#25429d", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331469, "uuid": "8990370e-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://theipcommunity.com/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331469, "uuid": "899853bb-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.243.109.247:9999/a.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Ligolo", "colour": "#BDEABC", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331471, "uuid": "8aaace7a-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.112.207.69:8000/4.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331478, "uuid": "8ef5af7a-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.112.207.69:8000/3.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331479, "uuid": "8fb21ad4-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.112.207.69:8000/2.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Lazagne", "colour": "#0dc975", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331480, "uuid": "9039794d-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.112.207.69:8000/1.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331526, "uuid": "ab68118a-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.243.109.247:9999/svc4444.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "marte", "colour": "#25429d", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331526, "uuid": "ab825e67-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.243.109.247:9999/http8888.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "marte", "colour": "#25429d", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331526, "uuid": "abb92130-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.167.234.235/a.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Rozena", "colour": "#def27c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331585, "uuid": "cea204a3-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.243.109.247:9999/svc.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "marte", "colour": "#25429d", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331585, "uuid": "cea4e814-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.243.109.247:9999/shell4444.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "marte", "colour": "#25429d", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331586, "uuid": "cf58053e-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://x7p9a.mint7delivery.coupons/edge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331595, "uuid": "d4cca98d-0bfc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.176:38681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771331780, "uuid": "43410162-0bfd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.124.216:40560/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771332091, "uuid": "fc3deb0f-0bfd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.78.180:51130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771332185, "uuid": "34b93cb8-0bfe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://courier.mint7delivery.coupons/edge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771332252, "uuid": "5c6297e1-0bfe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.118.153:33969/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771332262, "uuid": "626aaa52-0bfe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.140.175:39065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771332318, "uuid": "838c5308-0bfe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://187.111.182.138:52393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771332564, "uuid": "16285cd8-0bff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.232.18:40543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771332564, "uuid": "169a272c-0bff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.190.83:60303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771332681, "uuid": "5be64024-0bff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.176:38681/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771332746, "uuid": "82cdbbd3-0bff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.8.102:58986/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771332977, "uuid": "0cb91baa-0c00-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.228.49:56600/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771333222, "uuid": "9e8af368-0c00-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.124.216:40560/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771333281, "uuid": "c1942c44-0c00-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.68.148:46897/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771333338, "uuid": "e3f3ec18-0c00-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.68.148:46897/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771333339, "uuid": "e47f5c2e-0c00-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.124.15:57879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771333566, "uuid": "6bc1b21c-0c01-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://rnint-vvave.mint7delivery.coupons/edge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771333821, "uuid": "03958d17-0c02-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.89.72:49612/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771333898, "uuid": "31406b25-0c02-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.119.99:53253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771333947, "uuid": "4eed8b2e-0c02-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.89.72:49612/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771334046, "uuid": "89e42956-0c02-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://q4m8v.peach3package.coupons/edge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771334347, "uuid": "3d2cef75-0c03-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.9.224.148:36375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771334467, "uuid": "84972d32-0c03-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ni7zcfqx.gas98generator.digital/?=check&&actmn=UZxljOlCPNqhZYlj", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771334478, "uuid": "8b65af61-0c03-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.228.49:56600/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771334855, "uuid": "6bdc3599-0c04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.124.222:35772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771334970, "uuid": "b082002c-0c04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.124.15:57879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771335008, "uuid": "c6fa6d1f-0c04-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://crate.peach3package.coupons/edge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771335501, "uuid": "ed041cf0-0c05-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.124.222:35772/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771335557, "uuid": "0e0a8cd1-0c06-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.242.117:35108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771335740, "uuid": "7b27e202-0c06-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.119.99:53253/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771335969, "uuid": "039f19a1-0c07-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.9.224.148:36375/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771336643, "uuid": "958b5cc2-0c08-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.186.63:59560/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771337170, "uuid": "cfc7c82b-0c09-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.228.208:45958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771337423, "uuid": "66bf0477-0c0a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.242.117:35108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771337586, "uuid": "c7b66872-0c0a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://p3ach-llnk.peach3package.coupons/edge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771337660, "uuid": "f41c21ec-0c0a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.76.34:33533/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771338021, "uuid": "cb3abb74-0c0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.40.60:47553/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771338093, "uuid": "f601f0d0-0c0b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.118.28:44773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771338248, "uuid": "5296fd74-0c0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://t6k2n.berry9shipment.coupons/edge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771338262, "uuid": "5ad453d2-0c0c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.186.63:59560/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771339342, "uuid": "de29a569-0c0e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.76.34:33533/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771339461, "uuid": "25378f71-0c0f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.2.220:34591/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771339817, "uuid": "f96b37eb-0c0f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.219.233:54362/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771339867, "uuid": "17573726-0c10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://manifest.berry9shipment.coupons/edge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771340046, "uuid": "820a9581-0c10-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://b3rry-rnove.berry9shipment.coupons/edge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771340590, "uuid": "c623af82-0c11-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.41.122:33194/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771340592, "uuid": "c7253e35-0c11-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.254:43921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771340771, "uuid": "320fe29a-0c12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.72.72:41315/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771340958, "uuid": "a1791d02-0c12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.64.147:58222/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771341008, "uuid": "bf9117a0-0c12-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://m9r3p.olive4parcel.coupons/edge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771341439, "uuid": "c00a2848-0c13-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.242:33171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771341556, "uuid": "064146f0-0c14-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.200.188:47949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771341617, "uuid": "2a18c55a-0c14-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.226.174:60046/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771341733, "uuid": "6f440120-0c14-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.72.72:41315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771341908, "uuid": "d8182f24-0c14-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://waybill.olive4parcel.coupons/edge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771341909, "uuid": "d84ae1fb-0c14-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://0ufhrxly.chattytolet.digital/?=check&&actmn=bGGgPOIGTWOcEcpt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342039, "uuid": "25c31cea-0c15-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.81.9:41182/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342211, "uuid": "8c87ec0a-0c15-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.254:43921/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342508, "uuid": "3d9a12c0-0c16-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://0live-vvork.olive4parcel.coupons/edge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342510, "uuid": "3ee6c6ec-0c16-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.180.163.104:45932/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342576, "uuid": "6610a55a-0c16-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.16.242:33171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342689, "uuid": "a9508273-0c16-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/yv6ylz.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342698, "uuid": "ae8ed407-0c16-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.36.132:41396/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342756, "uuid": "d1097c80-0c16-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.224.137:52147/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342865, "uuid": "121a069f-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254/91.92.243.254/victorzz/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342865, "uuid": "1276935b-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254/91.92.243.254/mmaassaabbiikk/masabik/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342865, "uuid": "12772db9-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/vicsix/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342865, "uuid": "12774b3c-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/vicfour/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342868, "uuid": "13cd12ce-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/vicfive/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342869, "uuid": "1488351b-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/victorzz/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342869, "uuid": "148d94a8-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/masabik/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342869, "uuid": "148d95eb-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/vicnine/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342869, "uuid": "14c0018c-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/masabikthree/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "1516e1a5-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/vicky/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "15224a60-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/vickythree/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "1522fa66-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/mentostwo/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "152a07f9-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/victorxxthree/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "152c9171-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/victorsx/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "1531791f-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/victwelve/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "15363226-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/victorxx/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342870, "uuid": "156cd48b-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/victors/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342926, "uuid": "36918669-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/mmaassaabbiikk/masabik/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342926, "uuid": "369939c6-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/mmaassaabbiikk/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342926, "uuid": "36a189ee-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/courageone/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342985, "uuid": "59a036b2-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.83.39.185/shel/success/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342987, "uuid": "5ae7534f-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.83.39.185/file/xload/ENCRYPTED.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771342989, "uuid": "5c173a99-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.200.188:47949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771343046, "uuid": "7e5e4a10-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.5/webb/lokii.ps1", "Tag": [ { "name": "Loki", "colour": "#8b3626", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771343046, "uuid": "7e5e536a-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.5/webb/johnn.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771343047, "uuid": "7ed16f1e-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.5/webb/easybin.ps1", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771343048, "uuid": "7f5ac9de-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.5/webb/CLASSMATE.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771343048, "uuid": "7f85a839-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.5/webb/CLALLASS.ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771343049, "uuid": "7fd2de18-0c17-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.5/webb/phantom.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771343292, "uuid": "10b62ca3-0c18-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.208:51395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771343355, "uuid": "368a071f-0c18-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://tallrobot.mypi.co/lekeleke/iQFLVPnq194.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771343355, "uuid": "3699512f-0c18-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://tallrobot.mypi.co/lekeleke/Oblations.ocx", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771343417, "uuid": "5b772770-0c18-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.38/manji.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771343467, "uuid": "78fba279-0c18-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://z3n7a.mango6courier.coupons/edge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771344144, "uuid": "0cbfa461-0c1a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.180.163.104:45932/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771344320, "uuid": "757477f5-0c1a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.36.132:41396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771344426, "uuid": "b4711628-0c1a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://handoff.mango6courier.coupons/edge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771344499, "uuid": "e0470a8d-0c1a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.53.242:36029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771344678, "uuid": "4ae334fe-0c1b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.70.208:51395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771344786, "uuid": "8b415022-0c1b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://rnang0-rnix.mango6courier.coupons/edge", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771345032, "uuid": "1df1ea87-0c1c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/Luncher.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771345087, "uuid": "3e5bd4a7-0c1c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6608710704/YoUSpNJ.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771345397, "uuid": "f7554150-0c1c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:52412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771345447, "uuid": "151b650a-0c1d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://c9t5q.lemon8logistics.coupons/cachehost", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771345462, "uuid": "1e203f10-0c1d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.81.9:41182/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771345695, "uuid": "a8d2ff62-0c1d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.21:33251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771345865, "uuid": "0e83b312-0c1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://warehouse.lemon8logistics.coupons/cachehost", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771346108, "uuid": "9f0bda44-0c1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.53.242:36029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771346175, "uuid": "c7137c55-0c1e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.254.10.212:44467/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771346285, "uuid": "08cd3112-0c1f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://l3rn0n-llne.lemon8logistics.coupons/cachehost", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771346828, "uuid": "4c91e77c-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.126/jack5tr.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771346828, "uuid": "4ca29595-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.126/debug.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771346829, "uuid": "4cb10cb0-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.116.52.126/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771346830, "uuid": "4d493260-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.7.183:47029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771346898, "uuid": "75ee4006-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.161.116.70:3683/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347011, "uuid": "b98939e7-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347011, "uuid": "b98e21f0-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347011, "uuid": "b98e3ced-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347015, "uuid": "bbe7314e-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347015, "uuid": "bbf25cab-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347015, "uuid": "bbf27254-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347015, "uuid": "bbf5be29-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347015, "uuid": "bbf6a6f8-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347015, "uuid": "bbf77c03-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347015, "uuid": "bbf77dc5-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347015, "uuid": "bbf7b63c-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347015, "uuid": "bbf7f1be-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347015, "uuid": "bbf8d8a7-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347015, "uuid": "bc1631c6-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347018, "uuid": "bd8e54cc-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347018, "uuid": "bd8e5bec-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347018, "uuid": "bd91d3db-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347019, "uuid": "be1694c9-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347021, "uuid": "bf6463d6-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/debug.dbg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347023, "uuid": "c0dbbe13-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347024, "uuid": "c0edf224-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347024, "uuid": "c0edf524-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347024, "uuid": "c0edf9c1-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/debug.dbg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347024, "uuid": "c0f12540-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347024, "uuid": "c0f713a0-0c20-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347908, "uuid": "cff63c5f-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://routing.apple2dispatch.coupons/cachehost", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347908, "uuid": "d02d8f5c-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://p8x1m.apple2dispatch.coupons/cachehost", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347909, "uuid": "d09d3f89-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347912, "uuid": "d29f1f7b-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/jack5tr.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347912, "uuid": "d2a214db-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/jack5tr.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347913, "uuid": "d2cd737f-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/abc1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347913, "uuid": "d2cdb774-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/abc3.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347913, "uuid": "d2ebd07a-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/abc2.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347913, "uuid": "d2ebd689-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://nguyentuanan.com/abc2.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347913, "uuid": "d2ebf2c5-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/abc1.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347913, "uuid": "d3055cd4-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://bbos.minet.vn/abc3.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347916, "uuid": "d4e0fa99-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.205.35:54232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347916, "uuid": "d5141bc8-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.217/bin", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347916, "uuid": "d5182ef4-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.217/pay", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347917, "uuid": "d52e867f-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:52412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347917, "uuid": "d54709df-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.7.183:47029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347919, "uuid": "d6e7cb38-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.217/bins/parm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347920, "uuid": "d70e6903-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.217/yarn", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347920, "uuid": "d719ceff-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.156.152.217/bins/pspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347920, "uuid": "d7339384-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.21:33251/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "f5f5e1ba-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/cat.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "f5f742ee-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "f611827c-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "f61fea29-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "f6256b57-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "f6259779-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "f625d8af-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "f625e578-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/powerpc64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "f626019e-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/armhf", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "f6265111-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "f626661f-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "f6267845-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771347972, "uuid": "f65923c3-0c22-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.64.141:41271/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348029, "uuid": "18699aed-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.114.147/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348146, "uuid": "5db18b8c-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://app1e-vvex.apple2dispatch.coupons/cachehost", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348151, "uuid": "60ce2db4-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.messageforms.com/arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348151, "uuid": "60e22929-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-86-114-147.dal.priv.octovpn.net/armhf", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348151, "uuid": "60f8b524-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://secure.messageforms.com/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348151, "uuid": "60f8b789-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-86-114-147.dal.priv.octovpn.net/mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348151, "uuid": "60fb7e48-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.messageforms.com/i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348151, "uuid": "60fb7ef2-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.messageforms.com/sparc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348151, "uuid": "60fb9de6-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/armhf", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348151, "uuid": "60fe0cdf-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-86-114-147.dal.priv.octovpn.net/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348151, "uuid": "60fe2a8f-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-86-114-147.dal.priv.octovpn.net/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348151, "uuid": "60fe7d7a-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-86-114-147.dal.priv.octovpn.net/powerpc64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348151, "uuid": "6116d9ef-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.130.240/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348152, "uuid": "61b6efb7-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.162/arm/", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348159, "uuid": "656e9a7f-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://secure.messageforms.com/i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348159, "uuid": "65a39e81-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.messageforms.com/powerpc64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348159, "uuid": "65cbe1cc-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://secure.messageforms.com/arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348159, "uuid": "65dece3d-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://secure.messageforms.com/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348159, "uuid": "65ef8509-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "660ecda4-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-86-114-147.dal.priv.octovpn.net/arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "6619475f-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.messageforms.com/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "661c3333-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "66247bcc-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-86-114-147.dal.priv.octovpn.net/aarch64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "66285a24-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://secure.messageforms.com/armhf", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "6630e552-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://secure.messageforms.com/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "663be5ee-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "66419110-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "66419b4d-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "66533ec2-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.messageforms.com/armhf", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "6653604d-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/aarch64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "6653a2a3-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://secure.messageforms.com/aarch64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "6653a399-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.messageforms.com/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "6673a81b-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-86-114-147.dal.priv.octovpn.net/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "6680cfe7-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://secure.messageforms.com/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "6685272f-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/sparc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348160, "uuid": "6685b38c-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.messageforms.com/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348161, "uuid": "66bd7339-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.151.0.172:1557/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348161, "uuid": "66e29fcc-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://secure.messageforms.com/mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348161, "uuid": "66e35839-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://secure.messageforms.com/sparc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348161, "uuid": "66ed8c0a-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-86-114-147.dal.priv.octovpn.net/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348161, "uuid": "66f3ec0c-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/powerpc64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348161, "uuid": "67028950-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-86-114-147.dal.priv.octovpn.net/i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348161, "uuid": "672bd3ae-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://secure.messageforms.com/powerpc64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348162, "uuid": "67364eb1-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.65.80:2004/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348162, "uuid": "6739b4aa-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.10.213.179:9000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348162, "uuid": "673a9c2d-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.110.176.27/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348162, "uuid": "6753c499-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.messageforms.com/aarch64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348162, "uuid": "675c77b7-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.messageforms.com/mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348163, "uuid": "68076e06-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.50.146.124:9301/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348168, "uuid": "6ae6924b-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-86-114-147.dal.priv.octovpn.net/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348168, "uuid": "6aec0093-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-86-114-147.dal.priv.octovpn.net/sparc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348172, "uuid": "6d5361d7-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348172, "uuid": "6d6a1d1e-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348172, "uuid": "6d71d2d1-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.messageforms.com/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348172, "uuid": "6d77439f-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771348173, "uuid": "6e1dfe76-0c23-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.messageforms.com/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349046, "uuid": "763086be-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/?C=D;O=A", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349046, "uuid": "7634c211-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/?C=M;O=A", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349046, "uuid": "76356d1d-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/hiddenbin/?C=N;O=D", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349047, "uuid": "76f1cd54-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/?C=N;O=D", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349050, "uuid": "78bd21d5-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.26.74.181/?C=S;O=A", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "79c49ce9-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/powerpc.armageddon", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "79c4caf0-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/mips.armageddon", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "79c5954f-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/i586.armageddon", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "79c681df-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/armv6l.armageddon", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "79c69557-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/mipsel.armageddon", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "79c6fd73-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/armv4l.armageddon", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "79c73e4c-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/sparc.armageddon", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "79c74379-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/armageddon.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "79c78717-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/powerpc440.armageddon", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "79d3a818-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/i686.armageddon", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "79d3b37c-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/m68k.armageddon", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "79dd56b4-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/arc.armageddon", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "79f4b41a-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.196.192:443/omah.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "79f8fd16-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/armv5l.armageddon", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "79fc0034-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/sh4.armageddon", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "7a0597fd-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://134.199.196.192/omah.sh", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349052, "uuid": "7a3e6770-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/armv7l.armageddon", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349053, "uuid": "7a539a2e-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/israel.powerpc-440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349053, "uuid": "7a5f0369-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ch3rry-rnark.cherry5freight.coupons/cachehost", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349053, "uuid": "7a8d7eae-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/israel.i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349053, "uuid": "7a8e174f-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.205.35:54232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349053, "uuid": "7a99aea6-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pallet.cherry5freight.coupons/cachehost", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349053, "uuid": "7a9e53cb-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://r2k6d.cherry5freight.coupons/cachehost", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349053, "uuid": "7ab87b99-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.110.69.92:1042/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349054, "uuid": "7b214ca7-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://a5v9n.grape1shipping.coupons/cachehost", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349054, "uuid": "7b4c98ef-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.121.104/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349054, "uuid": "7b50b019-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.11.64.143/Documents/WF_eStatement_02_2026.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "xml-opendir", "colour": "#1F06AF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349054, "uuid": "7b51752f-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.53.160.33:5555/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349055, "uuid": "7b84c590-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.239.191.12:15887/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349055, "uuid": "7b88e6de-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.66.82/x86_64.armageddon", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349055, "uuid": "7bb176ce-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.89.189.98:46828/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349055, "uuid": "7bde055e-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://secure.messageforms.com/cat.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349055, "uuid": "7be32357-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.132.167.9:8081/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349056, "uuid": "7c94356f-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.67.246.82:22072/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349057, "uuid": "7cc5a87d-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.193.4.172:23044/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349057, "uuid": "7d1cee79-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172-86-114-147.dal.priv.octovpn.net/cat.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349060, "uuid": "7e7d9335-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.163.109/israel.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349060, "uuid": "7e886ed2-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://secure.messageforms.com/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349060, "uuid": "7ea07329-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://messageforms.com/cat.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349060, "uuid": "7eaffb24-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.messageforms.com/cat.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349061, "uuid": "7f28b52c-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.43.75.27:61833/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349064, "uuid": "81084a11-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://kavacanada.ca/22216.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349117, "uuid": "a07ed198-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.62.43:58778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349169, "uuid": "bfa41f6d-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.skwise.net/nullnet_bin_dir/nullnet_load.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349173, "uuid": "c24d9244-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.skwise.net/nullnet_bin_dir/nullnet_load.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "c349c06c-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://skwise.net/nullnet_bin_dir/nullnet_load.i486", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "c34f615a-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://skwise.net/nullnet_bin_dir/nullnet_load.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "c35259b3-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.skwise.net/nullnet_bin_dir/nullnet_load.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "c3525aea-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.skwise.net/nullnet_bin_dir/nullnet_load.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "c355b5a9-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.skwise.net/nullnet_bin_dir/nullnet_load.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "c355cfaf-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.skwise.net/nullnet_bin_dir/nullnet_load.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "c356eae1-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.skwise.net/nullnet_bin_dir/nullnet_load.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "c35c3fc0-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://skwise.net/nullnet_bin_dir/nullnet_load.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349175, "uuid": "c377d04b-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://skwise.net/nullnet_bin_dir/nullnet_load.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349176, "uuid": "c3a790ff-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.skwise.net/nullnet_bin_dir/nullnet_load.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349176, "uuid": "c3a8697c-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://skwise.net/nullnet_bin_dir/nullnet_load.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349176, "uuid": "c3a91b09-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://skwise.net/nullnet_bin_dir/nullnet_load.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349176, "uuid": "c3c34541-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.skwise.net/nullnet_bin_dir/nullnet_load.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349176, "uuid": "c3eadf38-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://skwise.net/nullnet_bin_dir/nullnet_load.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349176, "uuid": "c3f2622e-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.skwise.net/nullnet_bin_dir/nullnet_load.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349176, "uuid": "c3f4a776-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.skwise.net/nullnet_bin_dir/nullnet_load.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349176, "uuid": "c3f4ce3f-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.skwise.net/nullnet_bin_dir/nullnet_load.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349176, "uuid": "c40756b0-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.247.218.209:35561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "c52a4222-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.skwise.net/nullnet_bin_dir/nullnet_load.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "c5309884-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.skwise.net/nullnet_bin_dir/nullnet_load.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "c531f8c4-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://skwise.net/nullnet_bin_dir/nullnet_load.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "c5320959-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://skwise.net/nullnet_bin_dir/nullnet_load.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "c5332f12-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.skwise.net/nullnet_bin_dir/nullnet_load.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "c535e7a6-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.skwise.net/nullnet_bin_dir/nullnet_load.i486", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "c5369caf-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://skwise.net/nullnet_bin_dir/nullnet_load.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "c5369cad-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://skwise.net/nullnet_bin_dir/nullnet_load.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "c5381fcf-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.skwise.net/nullnet_bin_dir/nullnet_load.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "c53ae872-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.skwise.net/nullnet_bin_dir/nullnet_load.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "c55e93cd-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.skwise.net/nullnet_bin_dir/nullnet_load.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349178, "uuid": "c55fa3bc-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://skwise.net/nullnet_bin_dir/nullnet_load.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349180, "uuid": "c62b43f9-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.skwise.net/nullnet_bin_dir/nullnet_load.i486", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349180, "uuid": "c6340e3f-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.skwise.net/nullnet_bin_dir/nullnet_load.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349180, "uuid": "c6369017-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://skwise.net/nullnet_bin_dir/nullnet_load.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349180, "uuid": "c638f083-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.skwise.net/nullnet_bin_dir/nullnet_load.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349180, "uuid": "c6409f38-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.skwise.net/nullnet_bin_dir/nullnet_load.arc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349181, "uuid": "c70597d1-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://skwise.net/nullnet_bin_dir/nullnet_load.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349181, "uuid": "c70a2b4f-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.skwise.net/nullnet_bin_dir/nullnet_load.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349189, "uuid": "cb8869b2-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://skwise.net/nullnet_bin_dir/nullnet_load.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349189, "uuid": "cb8c98ad-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.skwise.net/nullnet_bin_dir/nullnet_load.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349189, "uuid": "cb8d53c4-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.skwise.net/nullnet_bin_dir/nullnet_load.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349189, "uuid": "cb91ba58-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.skwise.net/nullnet_bin_dir/nullnet_load.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771349189, "uuid": "cb91c8f9-0c25-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.skwise.net/nullnet_bin_dir/nullnet_load.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350067, "uuid": "d71ff0fa-0c27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://grap3-llow.grape1shipping.coupons/cachehost", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350067, "uuid": "d7364bee-0c27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://consign.grape1shipping.coupons/cachehost", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350068, "uuid": "d7441845-0c27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://k4q8m.plum8express.coupons/cachehost", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350068, "uuid": "d76c066a-0c27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://priority.plum8express.coupons/cachehost", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350078, "uuid": "dd3cd0e8-0c27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.skwise.net/nullnet_bin_dir/nullnet_load.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350078, "uuid": "dd3eb851-0c27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.skwise.net/nullnet_bin_dir/nullnet_load.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350087, "uuid": "e2ce8ece-0c27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.55:45760/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350091, "uuid": "e547a88e-0c27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.55:45760/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350102, "uuid": "ebb21884-0c27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.170.98:51109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350185, "uuid": "1d537c92-0c28-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.29/putty.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350307, "uuid": "66509557-0c28-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://oxwv9bay.agitate6vagina.digital/?=check&&actmn=dsVnbQqKeXXYWRte", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350486, "uuid": "d0d67545-0c28-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://morningcoffee.swiftleaf.coupons/daily_report_v2", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350494, "uuid": "d54305f0-0c28-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.170.98:51109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771350726, "uuid": "5fe06808-0c29-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bookclub.swiftleaf.coupons/meeting_notes_pdf", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351029, "uuid": "148e6589-0c2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.164.244:51938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351267, "uuid": "a262acbb-0c2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://gardenplan.swiftleaf.coupons/seed_list_2026", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351328, "uuid": "c6b92adb-0c2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.78.183.166:52033/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351328, "uuid": "c6c8a019-0c2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.64.80/bins/hoho.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351328, "uuid": "c6c9b138-0c2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.64.80/bins/hoho.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351328, "uuid": "c6df4f79-0c2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.64.80/bins/hoho.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351329, "uuid": "c6e63553-0c2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.64.80/bins/hoho.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351329, "uuid": "c6e81902-0c2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.64.80/bins/hoho.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351329, "uuid": "c6e81b38-0c2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.64.80/bins/hoho.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351329, "uuid": "c6f0b522-0c2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.64.80/bins/hoho.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351329, "uuid": "c6f777a9-0c2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.64.80/bins/hoho.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351331, "uuid": "c87f1986-0c2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.64.80/bins/hoho.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351331, "uuid": "c87f3b04-0c2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.64.80/bins/hoho.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351395, "uuid": "ee7e787c-0c2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.188.64.80/bins/hoho.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351449, "uuid": "0ec974a8-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://urbanbike.velvetmaple.coupons/route_map_data", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351514, "uuid": "35b66efe-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.194.92:35924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351577, "uuid": "5afbc56c-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.194.92:35924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351687, "uuid": "9c74a8ab-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://citypulse.velvetmaple.coupons/sensor_log_main", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4ba7562-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/mirai.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4c11f89-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/miraint.arm5n", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4c8c7fb-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/mirai.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4cf3df0-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/miraint.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4d37296-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/mirai.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4d8a8ee-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/miraint.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4dc50c7-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/miraint.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4dc7554-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/mirai.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4de76c8-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/miraint.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4de92b9-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/mirai.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4e1583b-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/mirai.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4e1c71b-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/mirai.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4f8dbf9-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/miraint.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4f96c08-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/miraint.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4f9afc1-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/miraint.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a4fa57ad-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/mirai.gnueabihf", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a502288c-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/mirai.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a50a39dd-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/miraint.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a50e4361-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/mirai.arm5n", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a5162da3-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/mirai.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a51713f5-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/miraint.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351701, "uuid": "a51c9a0a-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.177.57.81/bins/bins.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351808, "uuid": "e4b514c1-0c2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://streetart.velvetmaple.coupons/gallery_preview", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351989, "uuid": "5046ea0d-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/mirai.arm5n", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351989, "uuid": "504fbc51-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/mirai.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351989, "uuid": "504fc058-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/mirai.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351989, "uuid": "5056ea29-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/miraint.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351989, "uuid": "505b75c8-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/miraint.arm5n", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351989, "uuid": "505bb076-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/miraint.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "51cd840a-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/miraint.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "51d0291e-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/miraint.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "51d291d8-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/miraint.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "51d64db9-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/mirai.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "51d65634-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/mirai.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "51da4fdc-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/miraint.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "51dd75c3-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/miraint.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "51de95ad-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/mirai.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "51e1d988-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/miraint.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "51e22966-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/mirai.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "51e2b3ac-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/mirai.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "51e2c005-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/mirai.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "51e2e892-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/miraint.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771351991, "uuid": "51e2ecb2-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.25.54/bins/mirai.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352046, "uuid": "72ca0f60-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://blueocean.frozenshell.coupons/wave_static_bin", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352234, "uuid": "e2de1a7c-0c2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.87.89:57057/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352288, "uuid": "027d8de1-0c2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.181.62/bins/hydra.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352288, "uuid": "027fbc92-0c2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.181.62/bins/c2_server", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352288, "uuid": "0287afed-0c2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.181.62/bins/hydra.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352288, "uuid": "0288da43-0c2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.181.62/bins/hydra.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352297, "uuid": "085fd1f6-0c2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.181.62/bins/hydra.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352298, "uuid": "08964cdc-0c2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.181.62/bins/hydra.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352298, "uuid": "089b1faf-0c2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.181.62/bins/hydra.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352298, "uuid": "08add89f-0c2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.181.62/bins/hydra.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352346, "uuid": "252b7e04-0c2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://deepdive.frozenshell.coupons/diving_log_xml", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352587, "uuid": "b4f8eb46-0c2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://brightidea.boldstone.coupons/sketch_draft_01", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352604, "uuid": "bef10da3-0c2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.115.142:40171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352721, "uuid": "04c685e7-0c2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.164.244:51938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352769, "uuid": "215dab17-0c2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.241.154.184/cyber.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771352887, "uuid": "679e0146-0c2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://smartmind.boldstone.coupons/mind_map_shared", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771353014, "uuid": "b3aaf9b2-0c2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.115.142:40171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771353246, "uuid": "3dd074a2-0c2f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://clearview.boldstone.coupons/focus_timer_set", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771353307, "uuid": "62456b97-0c2f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/m4x7c/hfd/refs/heads/main/siu.ps1", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771353667, "uuid": "38afd37d-0c30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://wildriver.silverpeak.coupons/flow_rate_calc", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771353909, "uuid": "c8fe9066-0c30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://highmount.silverpeak.coupons/peak_coords_txt", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771353981, "uuid": "f39f628f-0c30-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.122.168:50858/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771354114, "uuid": "4319e0f2-0c31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.90.231.139:49394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771354343, "uuid": "cb633609-0c31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.9.12:58938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771354647, "uuid": "80dee124-0c32-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.122.168:50858/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771354687, "uuid": "9899b363-0c32-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://kavacanada.ca/filepath.mp4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771354700, "uuid": "a09e91bc-0c32-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://kavacanada.ca/5a9e6e0a.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771354878, "uuid": "0ab1dce7-0c33-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.30.30:59959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771354927, "uuid": "280577ba-0c33-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://softbreeze.gentlewind.coupons/air_quality", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771355345, "uuid": "210d1cfc-0c34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://summerday.gentlewind.coupons/weather_sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771355477, "uuid": "6f70dd43-0c34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.3.30:34491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771355649, "uuid": "d634befb-0c34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.49.64:52531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771355650, "uuid": "d6aed710-0c34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.144.213:42123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771355766, "uuid": "1be3d454-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://calmnight.gentlewind.coupons/sleep_data", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771355779, "uuid": "23c61a37-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.52.72.79:54244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356134, "uuid": "f7068d3e-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.65.95.17:50148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356134, "uuid": "f71c998e-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.122/systemcl/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356134, "uuid": "f72e2461-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.122/systemcl/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356134, "uuid": "f734b73a-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.122/systemcl/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356134, "uuid": "f7437084-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.122/systemcl/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356134, "uuid": "f762e195-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.122/systemcl/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356136, "uuid": "f882ebbf-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.122/systemcl/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356136, "uuid": "f8830174-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.122/systemcl/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356136, "uuid": "f885c8af-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.122/systemcl/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356136, "uuid": "f88621cb-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.122/systemcl/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356136, "uuid": "f8863447-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.122/systemcl/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356136, "uuid": "f8883bdb-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.122/systemcl/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356136, "uuid": "f88bd406-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.122/systemcl/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356136, "uuid": "f88f8d3e-0c35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.122/systemcl/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356199, "uuid": "1df9fc86-0c36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.26.115.122/systemcl/x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356261, "uuid": "4314be63-0c36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://213.6.196.230:27629/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356262, "uuid": "434ce1ae-0c36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.90.206.87:4419/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356262, "uuid": "4352ecd6-0c36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.158.189.82:53566/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356262, "uuid": "437bce18-0c36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.93.200.20:2260/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356263, "uuid": "4426531b-0c36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.149.208.71:52875/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356273, "uuid": "4a3cbd11-0c36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.16.247.83:54069/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356293, "uuid": "561055f6-0c36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.187.250.85:39885/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356315, "uuid": "6333d37a-0c36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.92.241.9:43121/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356316, "uuid": "6370724f-0c36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.127.239.19:64742/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356367, "uuid": "823276a5-0c36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://irongate.stronghold.coupons/access_key", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356379, "uuid": "893f7653-0c36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.65.95.17:50148/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356382, "uuid": "8af8dfe0-0c36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.237.116:37824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771356681, "uuid": "3d43092a-0c37-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.66.153:50337/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771357148, "uuid": "53848229-0c38-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://metalkey.stronghold.coupons/security_init", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771357221, "uuid": "7f19a470-0c38-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.3.30:34491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771357388, "uuid": "e2b69d04-0c38-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavychain.stronghold.coupons/load_test", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771357405, "uuid": "ecaa1e2c-0c38-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.49.64:52531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771357583, "uuid": "571089c3-0c39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.80.221.155:47390/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771357584, "uuid": "576d300d-0c39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.9.12:58938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771357819, "uuid": "e3739e60-0c39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.237.116:37824/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771358239, "uuid": "de1502f2-0c3a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.234.54:52361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771358781, "uuid": "2105e7ff-0c3c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.89:46455/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771360448, "uuid": "02702f3d-0c40-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.206.45:44513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771360450, "uuid": "03cf6db2-0c40-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.53.163:36300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771360576, "uuid": "4f173abd-0c40-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.19.139:35820/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771361476, "uuid": "676163a0-0c42-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.145:46251/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771361715, "uuid": "f5b476aa-0c42-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.177.145:46251/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771361951, "uuid": "82839472-0c43-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.51.220:57930/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771361952, "uuid": "82fed8f5-0c43-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.11.196:52267/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771362437, "uuid": "a442d512-0c44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.158.240.193:52467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771363158, "uuid": "51ac6a3a-0c46-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.11.196:52267/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771363391, "uuid": "dce9099e-0c46-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.51.220:57930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771363987, "uuid": "40209ab9-0c48-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://glasscube.glasspurity.coupons/render_cache", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771364122, "uuid": "904e3e24-0c48-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.158.240.193:52467/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771364470, "uuid": "60032e50-0c49-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.44.15:48823/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771364769, "uuid": "11c030a8-0c4a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.129.244.246:33481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771365007, "uuid": "a0209811-0c4a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.17.193:41586/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771365674, "uuid": "2dbc25fe-0c4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.89:46455/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771365906, "uuid": "b7e7417f-0c4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://sharpedge.glasspurity.coupons/cutter_tool", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771365915, "uuid": "bd2c912c-0c4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.54.162.65:46374/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771366039, "uuid": "07378f0b-0c4d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.129.244.246:33481/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771366816, "uuid": "d66fe555-0c4e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.99.45:42973/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771366869, "uuid": "f5ebfab9-0c4e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.99.45:42973/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771366930, "uuid": "1a187dc7-0c4f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.42:50130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771367120, "uuid": "8b7eb3e6-0c4f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.77.133:45933/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771367352, "uuid": "15aab1c6-0c50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.42:50130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771367536, "uuid": "83044351-0c50-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.54.162.65:46374/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771368007, "uuid": "9c22de44-0c51-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/748049926/G6Td6MC.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771368009, "uuid": "9d43e8db-0c51-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.203.196:37104/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771368378, "uuid": "7920ec15-0c52-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.23.234:36810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771368739, "uuid": "508b87ae-0c53-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.233.36.208:40743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771368970, "uuid": "d9c3589e-0c53-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.30.14:54203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771369148, "uuid": "43ed4441-0c54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/Launcher.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771369156, "uuid": "48e9e251-0c54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.227.229:43372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771369387, "uuid": "d2c41d52-0c54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://trackorbit.orbitalmap.coupons/orbit_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771369626, "uuid": "60ebf1fa-0c55-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://staratlas.orbitalmap.coupons/coord_set", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771369701, "uuid": "8db2ba94-0c55-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.23.234:36810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771369752, "uuid": "ac516ab9-0c55-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.233.36.208:40743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771370164, "uuid": "a1eef574-0c56-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://nodepoint.orbitalmap.coupons/signal_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771370414, "uuid": "36f3a90f-0c57-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.160.12:51490/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771370536, "uuid": "7f6bbd5f-0c57-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.61.39.88:55421/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771370596, "uuid": "a33a8b5a-0c57-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.45.22:41356/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771370710, "uuid": "e708c9b8-0c57-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://basecommand.orbitalmap.coupons/telemetry", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771370786, "uuid": "142ca590-0c58-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.227.229:43372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771371320, "uuid": "52c6469e-0c59-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.51.229:40845/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771371322, "uuid": "54082d0e-0c59-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.22.57:56532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771371429, "uuid": "93ff2ca6-0c59-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.198.254:36568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771371609, "uuid": "feee5c5c-0c59-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://officedesk.paperbridge.coupons/doc_flow", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771372036, "uuid": "fdc21394-0c5a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.30.14:54203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771372332, "uuid": "ada8a47b-0c5b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.183.233:40607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771372390, "uuid": "d072ebea-0c5b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.1.162:53031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771372518, "uuid": "1cbc591b-0c5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.51.229:40845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771372629, "uuid": "5eb88ede-0c5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.138:53812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771372632, "uuid": "6082bf18-0c5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.138:53812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342506, "uuid": "3c75619f-0c16-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "0live-vvork.olive4parcel.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771341906, "uuid": "d6cd5a59-0c14-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "0ufhrxly.chattytolet.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771306265, "uuid": "daf4e9c9-0bc1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.2.185.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286584, "uuid": "083c8faf-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.116.52.126", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771356246, "uuid": "39c053c9-0c36-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.90.206.87", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349049, "uuid": "7815af2e-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.53.160.33", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771366924, "uuid": "16ae7847-0c4f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.15.42", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771294444, "uuid": "5507ae37-0ba6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.112.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309265, "uuid": "d72310a7-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.119.220", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771301584, "uuid": "f4fceb33-0bb6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.26.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771340585, "uuid": "c3292714-0c11-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.44.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291505, "uuid": "7d493f84-0b9f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.192.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771287125, "uuid": "4a5fc8f3-0b95-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.121.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771296784, "uuid": "c7c833c1-0bab-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.102.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308365, "uuid": "be8b6061-0bc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.2.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289343, "uuid": "74686139-0b9a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.249.70.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309265, "uuid": "d72149a3-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.66.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771337645, "uuid": "ead95f90-0c0a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.76.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771298943, "uuid": "ce8828a3-0bb0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.163.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342684, "uuid": "a6467a99-0c16-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.36.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309265, "uuid": "d71db7b0-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.47.15", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771304644, "uuid": "14a18d79-0bbe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.117.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292705, "uuid": "489e0283-0ba2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.234.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290845, "uuid": "f3cab0b5-0b9d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.64.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771360444, "uuid": "000641ae-0c40-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.53.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771299964, "uuid": "2f45876f-0bb3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.7.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333324, "uuid": "db1cafdd-0c00-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.124.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771330085, "uuid": "50a515c2-0bf9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.140.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308844, "uuid": "dc1e78dc-0bc7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.237.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771293305, "uuid": "ae65e708-0ba3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.56.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771335545, "uuid": "06f8f9fa-0c06-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.242.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771355644, "uuid": "d2dbe232-0c34-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.144.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771307945, "uuid": "c42a96f6-0bc5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.146.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771324206, "uuid": "a0d7f485-0beb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.19.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348144, "uuid": "5cbfa138-0c23-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.110.176.27", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309324, "uuid": "fa8ad9e1-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.81.20", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771302844, "uuid": "e423d336-0bb9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.145.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309325, "uuid": "fa92cda9-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.86.132", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771313344, "uuid": "568b4602-0bd2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.11.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771302664, "uuid": "78adb618-0bb9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.121.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290425, "uuid": "f94aa95b-0b9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.5.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771350065, "uuid": "d5b9ebdb-0c27-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.170.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771287424, "uuid": "fcd0ebb6-0b95-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.148.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309324, "uuid": "fa825a74-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.232.14.252", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333864, "uuid": "1d77cb0d-0c02-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.119.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349165, "uuid": "bd871c76-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.247.218.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771354085, "uuid": "31a38104-0c31-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.90.231.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771302784, "uuid": "c00079d8-0bb9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.182.190.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309265, "uuid": "d7247271-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.149.26", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771360444, "uuid": "000644d3-0c40-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.186.206.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771356364, "uuid": "80906852-0c36-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.237.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309324, "uuid": "fa82501f-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.238.254.10", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309324, "uuid": "fa894dfd-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.72.182", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771332724, "uuid": "760165b8-0bff-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.8.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309324, "uuid": "fa844416-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.130.11.124", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309324, "uuid": "fa8b46cb-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.96.103.174", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771354865, "uuid": "02efa803-0c33-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.30.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309265, "uuid": "d7323c4b-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.76.32", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351025, "uuid": "11e6b84d-0c2a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.164.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771368365, "uuid": "712dd2f8-0c52-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.23.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771371306, "uuid": "4a2fb5bb-0c59-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.22.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771354325, "uuid": "c105225a-0c31-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.95.9.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771326965, "uuid": "0ce09658-0bf2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.24.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771338006, "uuid": "c205d38b-0c0b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.40.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352285, "uuid": "00e4fb2a-0c2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "130.12.181.62", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349045, "uuid": "75d0b861-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "134.199.196.192", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351985, "uuid": "4e7291a1-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.31.25.54", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352765, "uuid": "1eecd7da-0c2e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.241.154.184", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771331465, "uuid": "8727f168-0bfc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.243.109.247", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Ligolo", "colour": "#BDEABC", "exportable": true, "hide_tag": false }, { "name": "marte", "colour": "#25429d", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771330744, "uuid": "d9843bde-0bfa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.229.118.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314425, "uuid": "dad9894c-0bd4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.211.208", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771346164, "uuid": "c0a2ec68-0c1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "170.254.10.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771368725, "uuid": "47c18947-0c53-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.233.36.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348144, "uuid": "5ce603a4-0c23-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "172-86-114-147.dal.priv.octovpn.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349048, "uuid": "77c18b5e-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.86.121.104", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771300145, "uuid": "9b08759e-0bb3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.86.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771343405, "uuid": "53d18f72-0c18-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.38", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348151, "uuid": "60fba8d9-0c23-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.50.146.124", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771310825, "uuid": "78a3e892-0bcc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.190.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771332545, "uuid": "0ae43991-0bff-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.190.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771368964, "uuid": "d6b6ce9a-0c53-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.30.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352585, "uuid": "b3ef0f85-0c2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.115.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771302844, "uuid": "e423cfb5-0bb9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.52.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771304044, "uuid": "af45dd70-0bbc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.224.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771318806, "uuid": "0dcfa93f-0bdf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.249.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771358224, "uuid": "d50d3291-0c3a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.234.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771312325, "uuid": "f6e9e1cb-0bcf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.122.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309324, "uuid": "fa82e9b9-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.34.22", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771346825, "uuid": "4a5e74cb-0c20-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.7.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771364765, "uuid": "0f6cbab3-0c4a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.129.244.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771342506, "uuid": "3c68e209-0c16-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.180.163.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771355764, "uuid": "1adc1ef2-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.52.72.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771331465, "uuid": "8727f067-0bfc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.167.234.235", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Rozena", "colour": "#def27c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351685, "uuid": "9b4999c9-0c2b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.177.57.81", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771332306, "uuid": "7c611ad9-0bfe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "187.111.182.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771356125, "uuid": "f1919020-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.26.115.122", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771365905, "uuid": "b70eb410-0c4c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.54.162.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771356246, "uuid": "39c0224a-0c36-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.187.250.85", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309324, "uuid": "fa86f4d9-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "212.227.63.158", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349045, "uuid": "75d15682-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "213.193.4.172", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771296964, "uuid": "3320b047-0bac-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.209.57.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771346885, "uuid": "6e34dd72-0c20-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.161.116.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308424, "uuid": "e1eaa7e3-0bc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.231.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771321384, "uuid": "0ead6068-0be5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.232.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771361944, "uuid": "7e8067f9-0c43-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.11.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771365005, "uuid": "9e6ad33f-0c4a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.17.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771336624, "uuid": "8a9bc21c-0c08-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.186.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771293906, "uuid": "1447c785-0ba5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.123.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771300984, "uuid": "8f303ab7-0bb5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.75.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771372324, "uuid": "a95ed105-0c5b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.183.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771296665, "uuid": "80b969b8-0bab-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.32.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771332065, "uuid": "eca89361-0bfd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.78.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771327806, "uuid": "02965091-0bf4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.200.13.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771360565, "uuid": "4808907a-0c40-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.19.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308064, "uuid": "0b1d8ce5-0bc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.143.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771287484, "uuid": "20c71e01-0b96-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.212.137.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349045, "uuid": "75ed844d-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.239.191.12", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771317184, "uuid": "4777de92-0bdb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.113.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771331764, "uuid": "39bc3d39-0bfd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.124.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771312445, "uuid": "3e700eff-0bd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.26.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349045, "uuid": "75d0caa0-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.67.246.82", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348144, "uuid": "5cc5e54a-0c23-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.10.213.179", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309145, "uuid": "8f59caa5-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.187.73.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771370524, "uuid": "7894350b-0c57-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.61.39.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771356125, "uuid": "f1923f04-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.65.95.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351324, "uuid": "c42d049c-0c2a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.78.183.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771298224, "uuid": "2242e543-0baf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.246.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771334825, "uuid": "5a04f5ed-0c04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.176.124.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771329484, "uuid": "eab31761-0bf7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.25.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289824, "uuid": "93a2a6c5-0b9b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.81.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771341545, "uuid": "ff49dadd-0c13-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.200.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771295044, "uuid": "bad0183a-0ba7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.170.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771307524, "uuid": "c95e6387-0bc4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.212.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771317606, "uuid": "42ade246-0bdc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.219.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771369144, "uuid": "41e3525d-0c54-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.227.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771371306, "uuid": "4a2fcaae-0c59-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.51.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333805, "uuid": "fa2f901d-0c01-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.89.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771316165, "uuid": "e7d3fbc2-0bd8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.228.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771332965, "uuid": "057bb09c-0c00-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.228.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771311484, "uuid": "01e15f36-0bce-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.160.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349106, "uuid": "99e7489a-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.62.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771340765, "uuid": "2eb03b29-0c12-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.72.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771310406, "uuid": "7eed0bce-0bcb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.168.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771353965, "uuid": "ea38625f-0c30-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.122.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771370585, "uuid": "9cac8166-0c57-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.45.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771331465, "uuid": "8725936d-0bfc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.112.207.69", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Lazagne", "colour": "#0dc975", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771362424, "uuid": "9c7845d8-0c44-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.158.240.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349045, "uuid": "75d38698-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.110.69.92", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349046, "uuid": "765ae130-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.43.75.27", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771301584, "uuid": "f4fd15d6-0bb6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.104.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309265, "uuid": "d724bbe5-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.101.107", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352224, "uuid": "dca00b20-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.87.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309325, "uuid": "fa995447-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.126.13", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771325345, "uuid": "4783c545-0bee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.9.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309324, "uuid": "fa8481ae-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.140.219", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771344485, "uuid": "d7fad11e-0c1a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.53.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771292705, "uuid": "489ecd00-0ba2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.0.110.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309324, "uuid": "fa8630c8-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.219.38", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771293424, "uuid": "f53d790c-0ba3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.159.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771368005, "uuid": "9b01ab25-0c51-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.203.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771287305, "uuid": "b5f6cb3e-0b95-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.11.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351324, "uuid": "c42c2bb6-0c2a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.188.64.80", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349045, "uuid": "75cf97e0-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.188.66.82", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771356246, "uuid": "39c02639-0c36-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.149.208.71", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771356307, "uuid": "5e799b98-0c36-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.92.241.9", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349048, "uuid": "77bd5488-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.89.189.98", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308724, "uuid": "948d4ec0-0bc7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "82.26.74.181", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309324, "uuid": "fa8450c6-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.208.39.43", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348144, "uuid": "5cceb1f2-0c23-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.130.240", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771356307, "uuid": "5e79861a-0c36-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.127.239.19", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309324, "uuid": "fa8307d0-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.236.180.235", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771356246, "uuid": "39bfb9f9-0c36-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.158.189.82", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349045, "uuid": "760b36d8-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "a5v9n.grape1shipping.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771331164, "uuid": "d3e10edf-0bfb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "agitate6vagina.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349165, "uuid": "bd63c4e4-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "api.skwise.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348144, "uuid": "5cdcf4ac-0c23-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "app1e-vvex.apple2dispatch.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771340045, "uuid": "814b71a2-0c10-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "b3rry-rnove.berry9shipment.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771370708, "uuid": "e609c312-0c57-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "basecommand.orbitalmap.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347007, "uuid": "b6d512ec-0c20-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bbos.minet.vn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352045, "uuid": "71aa0026-0c2c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "blueocean.frozenshell.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771350725, "uuid": "5f06dd28-0c29-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bookclub.swiftleaf.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309325, "uuid": "fa9144bf-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bore.pub" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352585, "uuid": "b3fed8f3-0c2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "brightidea.boldstone.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771345445, "uuid": "140aff0b-0c1d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "c9t5q.lemon8logistics.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771355764, "uuid": "1ae97bc0-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "calmnight.gentlewind.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771321926, "uuid": "516d510e-0be6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "calmwater.gentlewave.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349045, "uuid": "760955d0-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ch3rry-rnark.cherry5freight.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771291085, "uuid": "82bb7bc7-0b9e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "citylight.urbanharvest.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351685, "uuid": "9b69bc27-0c2b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "citypulse.velvetmaple.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771311785, "uuid": "b4f6df3e-0bce-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "clearfocus.boldvision.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771353245, "uuid": "3cfabbf8-0c2f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "clearview.boldstone.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771307945, "uuid": "c45c382d-0bc5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "coldwind.silentpeak.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771350065, "uuid": "d5d52fd3-0c27-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "consign.grape1shipping.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771332184, "uuid": "34086e20-0bfe-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "courier.mint7delivery.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771335006, "uuid": "c5d6330d-0c04-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "crate.peach3package.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309268, "uuid": "d8a1966a-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cyxr.technok.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309265, "uuid": "d748a7e1-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cyxt.technok.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290425, "uuid": "f96aadfe-0b9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "darkriver.swiftmotion.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309806, "uuid": "1941997b-0bca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "deepblue.silentpeak.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352344, "uuid": "246378a1-0c2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "deepdive.frozenshell.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309265, "uuid": "d7477b22-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "download1585.mediafire.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309265, "uuid": "d74e406f-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "download2290.mediafire.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290664, "uuid": "87eb8f83-0b9d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fastsky.swiftmotion.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771289044, "uuid": "c26df0e6-0b99-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "freshbreeze.sandbox-proxy-diagnostic.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771327565, "uuid": "72a8ab4c-0bf3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "futureplan.brightminds.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351266, "uuid": "a15bbc60-0c2a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "gardenplan.swiftleaf.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771329484, "uuid": "ead6181f-0bf7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "gi9d0czb.serve5woodman.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771363986, "uuid": "3f2b02ab-0c48-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "glasscube.glasspurity.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771286884, "uuid": "bb259cc3-0b94-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "goldenapple.runtime-error-handler.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771350065, "uuid": "d5d56b10-0c27-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "grap3-llow.grape1shipping.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771294324, "uuid": "0d8e57ff-0ba6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "greenpark.urbanharvest.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771344424, "uuid": "b3aed128-0c1a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "handoff.mango6courier.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771357385, "uuid": "e091f09f-0c38-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavychain.stronghold.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771353906, "uuid": "c700809c-0c30-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "highmount.silverpeak.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771308844, "uuid": "dc2f81bf-0bc7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "highstone.silentpeak.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314306, "uuid": "93d137db-0bd4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "iceshore.frozengrove.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314485, "uuid": "feada584-0bd4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "imustgetlogsooo.site" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771356365, "uuid": "809cf237-0c36-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "irongate.stronghold.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771350065, "uuid": "d5daa168-0c27-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "k4q8m.plum8express.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771346284, "uuid": "07f44840-0c1f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "l3rn0n-llne.lemon8logistics.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771316825, "uuid": "71588db2-0bda-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "longway.hiddenpath.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771315085, "uuid": "6432e566-0bd6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lostforest.hiddenpath.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309268, "uuid": "d8a1a086-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunh.technok.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309265, "uuid": "d7417799-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunr.technok.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771316825, "uuid": "715f5859-0bda-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "m9jn8b8q.ostroy56sagacious.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771341007, "uuid": "be86b372-0c12-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "m9r3p.olive4parcel.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771339865, "uuid": "165d6ad4-0c10-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "manifest.berry9shipment.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771357145, "uuid": "518c2a5a-0c38-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "metalkey.stronghold.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771315924, "uuid": "5840cfcb-0bd8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "mnurlogistics.az" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771350485, "uuid": "d0118304-0c28-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "morningcoffee.swiftleaf.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314427, "uuid": "dc1601b9-0bd4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "my-do.s3.cubbit.eu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771310344, "uuid": "5a78a91f-0bcb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "newidea.boldvision.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347006, "uuid": "b6820c94-0c20-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "nguyentuanan.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771334465, "uuid": "835f87d4-0c03-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ni7zcfqx.gas98generator.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771370163, "uuid": "a13d5a66-0c56-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "nodepoint.orbitalmap.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771371608, "uuid": "fe279340-0c59-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "officedesk.paperbridge.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771307706, "uuid": "35b82546-0bc5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "oldbridge.urbanharvest.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771290909, "uuid": "1a33a60a-0b9e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "openfield.swiftmotion.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771350305, "uuid": "64ef2729-0c28-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "oxwv9bay.agitate6vagina.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771337585, "uuid": "c7046f56-0c0a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "p3ach-llnk.peach3package.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347906, "uuid": "cf00a27e-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "p8x1m.apple2dispatch.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349045, "uuid": "7609b122-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pallet.cherry5freight.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314547, "uuid": "23683003-0bd5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pastaco-ca.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771350065, "uuid": "d5d8474f-0c27-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "priority.plum8express.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771313284, "uuid": "32c31e58-0bd2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "puresnow.frozengrove.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771334044, "uuid": "887a3847-0c02-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "q4m8v.peach3package.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349045, "uuid": "75ee5a53-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "r2k6d.cherry5freight.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771319585, "uuid": "de04411e-0be0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "redcarpet.velvetroad.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771288684, "uuid": "ebccf58c-0b98-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "redstone.sandbox-proxy-diagnostic.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771344784, "uuid": "8a3de992-0c1b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "rnang0-rnix.mango6courier.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771333565, "uuid": "6afbc35d-0c01-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "rnint-vvave.mint7delivery.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771347906, "uuid": "ceeca944-0c22-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "routing.apple2dispatch.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314606, "uuid": "46979844-0bd5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "secretdoor.hiddenpath.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348144, "uuid": "5cdc4790-0c23-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "secure.messageforms.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771365905, "uuid": "b71d63d1-0c4c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "sharpedge.glasspurity.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349165, "uuid": "bd6716a5-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "skwise.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771288264, "uuid": "f1b02c7d-0b97-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "smartcloud.sandbox-proxy-diagnostic.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771352885, "uuid": "66ad627a-0c2e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "smartmind.boldstone.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771311484, "uuid": "01ef4075-0bce-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "smartstep.boldvision.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771320485, "uuid": "f6c167ba-0be2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "smoothride.velvetroad.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771354924, "uuid": "25ff2794-0c33-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "softbreeze.gentlewind.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771319044, "uuid": "9bddbf60-0bdf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "softtouch.velvetroad.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771369624, "uuid": "60252754-0c55-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "staratlas.orbitalmap.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351807, "uuid": "e3f8f95e-0c2b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "streetart.velvetmaple.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771321145, "uuid": "7fe8ddc6-0be4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "strongmetal.ironpulse.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771323425, "uuid": "cee57748-0be9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "summerbreeze.gentlewave.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771355344, "uuid": "2012d78e-0c34-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "summerday.gentlewind.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771309265, "uuid": "d74dbaff-0bc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "sunwukongs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771338247, "uuid": "517daf5b-0c0c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "t6k2n.berry9shipment.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771343344, "uuid": "30046813-0c18-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "tallrobot.mypi.co" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771314485, "uuid": "feb1d499-0bd4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "taxandmoreinc.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771331465, "uuid": "873dd190-0bfc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "theipcommunity.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771369384, "uuid": "d0faed6b-0c54-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "trackorbit.orbitalmap.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771315985, "uuid": "7c65a699-0bd8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "uniworldrivercruises-co.uk" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771351445, "uuid": "0c3c41a9-0c2b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "urbanbike.velvetmaple.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771345864, "uuid": "0d873ed8-0c1e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "warehouse.lemon8logistics.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771324685, "uuid": "bdf2f1f5-0bec-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmshore.gentlewave.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771341906, "uuid": "d6a9fd73-0c14-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "waybill.olive4parcel.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771288024, "uuid": "6293ab03-0b97-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "wildriver.runtime-error-handler.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771353665, "uuid": "376411fb-0c30-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "wildriver.silverpeak.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771312568, "uuid": "879e0ece-0bd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "winterland.frozengrove.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771326845, "uuid": "c5a72b95-0bf1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "wiseword.brightminds.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771348144, "uuid": "5ce3ab3d-0c23-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.messageforms.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771349165, "uuid": "bd6a2180-0c25-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.skwise.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771315866, "uuid": "357c23df-0bd8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.techlearnskill.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771331584, "uuid": "ce1c5df0-0bfc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "x7p9a.mint7delivery.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771343465, "uuid": "779ea7e6-0c18-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "z3n7a.mango6courier.coupons" } ] } }