{ "Event": { "published": true, "date": "2026-03-02", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-02", "timestamp": 1772496928, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "2c76fadd-5038-47bf-952a-2b5e9d79ba09", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772409850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772409850, "uuid": "5da92d03-a464-4710-8d1b-0dc8bfbd1a63", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772409850, "uuid": "23c63cc2-44c4-4434-a351-f11a8441acb7", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772409850, "uuid": "c5d2409c-09b1-4aa8-b346-709b2e66537e", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772409850, "uuid": "3d7ec45d-c0ac-4faf-960d-068b35b0b1dd", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772409850, "uuid": "6e604ccf-3bea-41f0-850d-097016eb028e", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1772410810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772410810, "uuid": "d2f7645d-a83f-445a-a0c9-b063f2d1f6de", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772410810, "uuid": "83244e09-d2a4-461d-a96f-74ad57ef8da9", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772410810, "uuid": "eace3832-9328-4110-976c-fa8d398598f0", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772410810, "uuid": "f6473ac8-8299-4849-ac0a-0041d08bf917", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772410810, "uuid": "ae42fb70-4ee7-4f0d-acd4-6cd701352788", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f38a90c5-15ae-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772415626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772415626, "uuid": "40c70c39-365f-4f36-a3c0-0d920c05d1d4", "comment": "Malware payload (Mirai)", "value": "10a51907a6eead2081ddf731cb432b12", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772415626, "uuid": "65984509-4263-4191-a74e-e11beab7a41c", "comment": "Malware payload (Mirai)", "value": "26373baf132e31821ea2e91ff0f5c72b790492c6cbae97cb635a47ef21b5e840", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772415626, "uuid": "1212c2ae-6c1d-4d38-9e2a-99e2d2784c53", "value": "T17FD30756B9919F11D5C321FAFB9E824933136FB8E3E93102DD206F64238A9DB0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772415626, "uuid": "2181009a-4e80-430d-bd18-762610f89f45", "value": "3072:AZtbZDNjkNRiBwFSN0Pp7oHdxa52nvYmuMIGlezjCcL+pFiP:wJNjkNI2cNWpYDa52nvYmuxGlsCM+/iP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772415626, "uuid": "2e400fcf-e707-4126-b2d3-4af2f025aee5", "value": 141968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772415626, "uuid": "4ed5a4a9-45b2-4e0e-b204-51e39e3686bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f110eeda-15d8-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772415692, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772415692, "uuid": "c3e05265-18c4-4fb2-8a91-77e8a8d7694e", "comment": "Malware payload (Mirai)", "value": "2adb3f60a38a226c21b51289d2680919", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772415692, "uuid": "279c2abc-86ae-4801-a569-f32705f7cfee", "comment": "Malware payload (Mirai)", "value": "336687311750c9c8ec9483b664289c61a2869bbe68696c217e56f077a342551b", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772415692, "uuid": "f9fdf24b-a74c-4528-b215-0df27fef5702", "value": "T1C7B30A56BD528B23C5C321F6FBAF424837136B7DD7EA3142ED147FA0274A4EA0E266", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772415692, "uuid": "5f69617d-d6f7-4a9d-8e0c-3d37ad869e13", "value": "3072:SxkOIfK3imSSr8tbpTkAc4KiLxxHMCqhscX:6pIfKShSAVpTk2KiLxJM4cX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772415692, "uuid": "0647e37d-32a8-417e-90ca-99d6c6278f95", "value": 117164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772415692, "uuid": "39fd4138-0c9d-44d8-8c49-7c6819b2238b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e11d732c-15b0-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772415754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772415754, "uuid": "d384c955-c992-4ba6-9671-fc68ad59cf58", "comment": "Malware payload (Mirai)", "value": "90fcca5c83e539793201b429a3a7213d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772415754, "uuid": "7544eef9-dae2-4df8-839e-04a9eb53d7b2", "comment": "Malware payload (Mirai)", "value": "22383d75ec99f8b1396a0fd810ca966865f5e2140fb466462ae73a30b0b1fe7d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772415754, "uuid": "6c48de6c-1c02-4950-b454-f59760fbd00b", "value": "T15E157C9DE786E0E1F56300F1025EDBF71534A12A5013FAF6FF492A6374327A16F162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772415754, "uuid": "69c2423c-8994-40cd-8e12-90865f069530", "value": "12288:g5T2L+hjPk2ZhA9hUf4z5NeNzpilb695zfw0Q/yELLHPVPyt/kxSmLKOLu:A2LujP7ZhA9hb5QN8lbetHQ/hPaG3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772415754, "uuid": "f6f79ee1-bbc5-4cb9-869f-ffd211972fd1", "value": 927384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772415754, "uuid": "1700b00e-c641-4f29-b3cc-0c5edd1519b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32d3b789-15d9-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772415803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772415803, "uuid": "431af294-517a-49ca-848c-f3aba2b1401e", "comment": "Malware payload", "value": "2cc48b250ceb010b2a14b75fac5ba424", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772415803, "uuid": "d219304f-57ef-48fe-815e-87be2f45d574", "comment": "Malware payload", "value": "f5c6fd53b35e7ea385d06eda83d7eb5dc43265991503d5d042e91deafe4db1c6", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mamont", "colour": "#499b9b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772415803, "uuid": "64208efc-b2fc-401d-8deb-14cef6309235", "value": "T1F2F51256E3A4907EFCFB86364B77175881578E168343EA874C66723C19BB8C0AE61F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772415803, "uuid": "8779050f-63ac-4ce6-85f0-462fd339a0ea", "value": "98304:DjDELxOE0yZHnloKztTmz2j4yU8oR6KfDQopY3D/24T/IAWd8:DE8E0snlosT2SnUBJfgP/Iz8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772415803, "uuid": "bfc4d29a-065d-41a6-a260-d3880c5088dd", "value": 3625668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772415803, "uuid": "9a39220e-caa8-432d-9808-078de7417d44", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a960831a-15b2-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772416011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416011, "uuid": "6413bffd-9e9d-4427-bcd1-c3dda3847e25", "comment": "Malware payload (Mirai)", "value": "fb966de3b2d3f8f1b0179dc1e5b3888a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416011, "uuid": "8b58fe57-a084-439d-991e-56abf1d8798a", "comment": "Malware payload (Mirai)", "value": "4776b0c4a847fca9526f7459f2f5f5736c64e890863888787d7c569c4f997c5d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416011, "uuid": "eef7bd11-daba-4dce-a16b-387c18f992b0", "value": "T1E8B32902B71D0F43D1632CF02B7B1BE0979AFE9118B9B5C0611EFAC552759F62286E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416011, "uuid": "b2f71ee9-6952-4440-98fb-5df6c47d7b01", "value": "1536:OdIPsTZi74XGhgjLlf/7VbQS9GVov8WKkJO+5yB4kQlW6kuTOk+dAXG6Odpf0kh:O6GCkLtvv8WQpCFW6rToxnLh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772416011, "uuid": "735d8279-52a6-45bb-b6aa-f12166defec3", "value": 117524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416011, "uuid": "8061649f-13b1-4455-b2d5-f4d198247dfd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ab4e762-15ca-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772416603, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416603, "uuid": "b0514dc5-23f9-4279-9fdb-26196619e386", "comment": "Malware payload (Mirai)", "value": "0926b9308ecb93df79faa6af5fdf1536", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416603, "uuid": "2e3289b1-e22d-4e13-b0f5-af09c47ed646", "comment": "Malware payload (Mirai)", "value": "4460eb7e8fd5c0911990d5c3e86b766e936ea2eb597f441dca9289148530893f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416603, "uuid": "40c227bb-f55b-48c6-b2bb-9d248fb488ea", "value": "T197E3D60ABF650FBBDCABDD3702F90B0225CCB85715A53B797534E918B50A18B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416603, "uuid": "83854b94-2c89-41d0-8390-7746d06402f5", "value": "3072:U4gkXaotGju7fJfmkzB98vWZi1BngTYns:Irju7fBmk998uSBnK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772416603, "uuid": "5171c8e3-d6ae-4c47-a771-225e46d809c1", "value": 153668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416603, "uuid": "0563180a-09b5-48f1-8ce7-e9f0bce82111", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5e87e7b-15aa-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772416730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416730, "uuid": "6a84f099-2ccb-4039-ad37-5c846f75d59e", "comment": "Malware payload (Mirai)", "value": "b586beb3762ea3ca4e9497df036177ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416730, "uuid": "2cb5d6ea-8956-4d9c-bb7b-b2a3bc6738b2", "comment": "Malware payload (Mirai)", "value": "fa83d27c4d2cf70cafefc6c22d92940db2d07bd950515ae2aa4dacf623e91938", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416730, "uuid": "9443e172-3b9b-4684-b1d2-d8903b0c37ff", "value": "T14A156D5BB2A374FDC057C43043ABDAB2A935B42502226E7B65C8D7303E27E701B59B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416730, "uuid": "fae5df14-4e75-4a06-9195-5b38179e1b7c", "value": "24576:ass+14s2kWjDCgc5q+rtCiLFxJJC8T2kJ:Z34s2kWPzitTlhT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772416730, "uuid": "7061a78c-3dcf-4141-a0c0-802cde034fef", "value": 898792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416730, "uuid": "21299e38-bdc2-4f9f-a194-806c87e26353", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "775a8ba9-15db-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772416776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416776, "uuid": "f94c1893-17f2-44bd-abc7-e88c57e2f64b", "comment": "Malware payload", "value": "f4e2b67a71c87be82b57aabb3a1d1097", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416776, "uuid": "0df7f599-b920-420c-bdb7-19f9b3d6d1b1", "comment": "Malware payload", "value": "41e39142a99510be4a05624f3c1c362449cfae474801af08b2ecf1ae88c4c997", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416776, "uuid": "6d3e15a6-3ed0-4f37-8229-773694e6e842", "value": "T155A3E91916670890F1EEDDC00D85B8BA1A137773A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416776, "uuid": "0786ce34-1f99-4ca3-baab-6c1bf06be233", "value": "1536:54Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqAW:igVBH3mPm+sqk+HAw0F5KijXxW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772416776, "uuid": "e0e4d10a-239f-4bff-934d-b0ae5e6dd399", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416776, "uuid": "a6d594c7-8e24-4a35-b170-2790bf24666f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1772416987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416987, "uuid": "da5808be-3667-4fcc-bf67-2bae0a2ad545", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416987, "uuid": "cbb94da3-6c22-487c-84d3-8e634277e81d", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416987, "uuid": "4e54b08e-1ce5-48c5-ba3e-9c133c20c596", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416987, "uuid": "f07fe3d2-d5fb-4480-b362-fc56b0d40a52", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772416987, "uuid": "a770fb86-2750-4177-92f6-4b1386a0289a", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5682dcf4-15de-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772418010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772418010, "uuid": "6be86abc-4450-49d8-a868-ac48395993fe", "comment": "Malware payload (Mirai)", "value": "3cdd8d08837ba93451782ba4eba5edae", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772418010, "uuid": "5f78218b-1f12-4cf9-bd3c-0f7cd179da91", "comment": "Malware payload (Mirai)", "value": "cec33f0758294d966a7bc6e35a01125c886380bdb078259960408be48b4d52a9", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772418010, "uuid": "0319ce93-9d6c-487e-bbd2-ec12428a4dab", "value": "T109B31A52BD929F13C5C221F6FBAE06483B137B78D6EE3142ED247FA127464DA0E275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772418010, "uuid": "8ad88b5d-09f0-439d-a86f-d1f1cb20b541", "value": "3072:2KJ+J4ecGHoAUi8qcXSHAorMvTwhvIEsX:t+J4e5IrhXSHA6M0hgEsX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772418010, "uuid": "617f2f15-573c-4a81-b123-506d6b51d9b1", "value": 113068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772418010, "uuid": "c1975a52-080d-47b3-91e6-78330c021f0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad06430c-15b2-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772418271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772418271, "uuid": "850b7099-8526-427f-9411-b2981d17fc94", "comment": "Malware payload (Mirai)", "value": "aee16cc7a6b581f17c7c87b92b033344", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772418271, "uuid": "a888f372-83a2-493f-b896-58314d915d2b", "comment": "Malware payload (Mirai)", "value": "59c5e84481158593af51c6f06b112f2b276c7774614677b42667c01a5c870807", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772418271, "uuid": "2914818f-24e0-4a7e-9d4a-959793277386", "value": "T191C31A56B992DB11D5C311BAFB9E514933132FBCE3EE7202DC206FA067464DB0E765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772418271, "uuid": "13f418b4-1df8-461a-b29e-14d22baa9d7c", "value": "3072:7rJStQ4kaiI4hvSvSToRRa7bcR9ekLBscaL:ZStFMTvSvkoXaP0eklaL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772418271, "uuid": "4f1d76fe-ef56-43e6-a493-01c7b1908ce9", "value": 123744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772418271, "uuid": "57782c80-64d1-44c2-8e6f-339ad2982a1d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91a7af6c-15df-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772418539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772418539, "uuid": "50db10fc-ab1e-49b4-b2a4-6f9c598abe4d", "comment": "Malware payload", "value": "d5a58fc2380d591593ba22cccb216c1c", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772418539, "uuid": "a086f3fe-3bdd-4765-8220-e3d4f516db9d", "comment": "Malware payload", "value": "93ad9d3f5ce0748626cfd9e5d7958bf5d85babfbf879f82d209651c2536c8aa3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772418539, "uuid": "a4aab612-a7e8-45d7-8c91-b2bd365f1944", "value": "T10A11B5096D09FF6B0638174CD470E41CD58BAE5CE220D8A550E3D07AAE917CCCF5E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772418539, "uuid": "8eaf5c9a-7abb-4ef1-81d3-27dfd57ffa21", "value": "24:hY5PW1oTVX9V6KDWvVmRzwVwoxPW/VHPU9eEFcz+Sf:iU6WBlHO+Sf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772418539, "uuid": "498723b2-1d04-4076-9d94-a4f1e32cf451", "value": 1004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772418539, "uuid": "eac157b0-4069-42a8-8d8c-9b4fbac5f5ec", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bffe082-15e2-11f1-8b52-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1772419657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772419657, "uuid": "cd98f3b8-09c9-406d-9753-8db59f80b0bb", "comment": "Malware payload (GCleaner)", "value": "6cff038e88f95882e88d4fc3469d290d", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772419657, "uuid": "f156e8ed-358f-48dd-bc8c-564d97ae4c25", "comment": "Malware payload (GCleaner)", "value": "8ac2f444e32a81351092142b30a5627e403535370d5223c77955d1fbf31903a7", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772419657, "uuid": "9d8a8b61-0c4d-4995-8fd3-b9d79d42477c", "value": "T127258E22BDA17433C1FE1AF8AC2B936F58267E112D28A4452FE41DCC4E39ED179351", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772419657, "uuid": "47919c00-3d70-42a0-b14c-4741f9d17de9", "value": "15d0fb46a467b7658a5b7623e5cec926", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772419657, "uuid": "94b88d1c-5d21-4679-be7a-7ab22f73b18f", "value": "12288:1IGSYoa5Iydmm9tOV3liWGjfxJmqjH9zO75Eagmu4J5mPPqbve6u7fQIds9AM0DH:6ROxz9q3dGjfzlp/17dPPqbs9O9mLw+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772419657, "uuid": "8048118a-92e5-4c07-bc40-b5320b4078db", "value": 1057792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772419657, "uuid": "ea1d4dbf-a155-4702-a223-7170064ea822", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f185198-15e2-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772419662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772419662, "uuid": "6f2fa307-f47b-4a2f-afb4-45c701c92877", "comment": "Malware payload (Mirai)", "value": "9d2ba43d55d094f25a68b027d0b1775e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772419662, "uuid": "4d87c94a-ba3c-4bb4-9f08-6b1255a44a59", "comment": "Malware payload (Mirai)", "value": "17ff5eb7506a556186ea1165b600940d2669510a4de6929fbbd911477f56d1fd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772419662, "uuid": "6689de8a-8a53-418f-887e-2d72de12e99b", "value": "T1C10428C7F800DEBEF80EF73B44570909B230B7A614925B732257396EED3A1950567E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772419662, "uuid": "579cb8cb-5a5f-42b1-86b0-c96b4fe3b282", "value": "3072:/LJ1+wT6GolXf9lubOmdLt/smon8yHQDCIFtpZ9wpfyaoYHTtdd/skddVfjbibLR:/l1lT7Yv9Ukf8yHECIFl98ikdQLo7kF5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772419662, "uuid": "2b90cf7f-36a0-4160-80cf-1c6f9d05e5d6", "value": 176800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772419662, "uuid": "1b588aeb-6d7c-43de-81bd-c7fc48250b98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772421975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772421975, "uuid": "ded97b64-03ab-4d80-ba14-9e1a96abacf6", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772421975, "uuid": "e2a100df-ce8e-48fd-bdca-d89ff322b138", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772421975, "uuid": "19463fec-bdef-4859-817c-13015670a275", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772421975, "uuid": "9382258d-e60b-4408-a25f-ea87b206e63b", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772421975, "uuid": "81e7ff5b-5d64-4a4b-8973-aaa95342fc88", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35d00245-15f0-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772425686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772425686, "uuid": "5e7bc160-d639-4518-a4fe-315499c4f204", "comment": "Malware payload", "value": "4ad3e559c20a7d3fdff1a6b0bbfd0cdb", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772425686, "uuid": "7a6c49c1-86d7-40d0-808d-c233669dff8d", "comment": "Malware payload", "value": "8554ead8d75d4bfa279c74847379cb60653f0ffb0289ba0e95dcef2007d13ece", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772425686, "uuid": "09c3200f-382a-4ede-a75a-8329648ab091", "value": "T1E80230BCC1E1FCC4475B22D4789AF6C3118B9B136EB71A6CD7C814924EA0119DBBA1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772425686, "uuid": "45dbad64-0b4d-4f68-bdc6-3f4384a442d6", "value": "192:+LukkMsOSJYCsw9SZAbWwY1N3DrWTEz2TKgmbYDRi0W:+fsOC9E4sj38EuWYU9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772425686, "uuid": "cd71ed20-ef9f-402a-ad1a-3b34ec17a515", "value": 8590, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772425686, "uuid": "342438c2-36ef-4ced-85e8-d3df6b8f722d", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca9cef47-15fc-11f1-8b52-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1772431090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772431090, "uuid": "1d87c362-7ab1-4907-bd2e-ce9c372e0f91", "comment": "Malware payload (ConnectWise)", "value": "60bb141e91abf95c3cd762e77ec9ce2c", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772431090, "uuid": "74bad87f-0ef4-4c46-86aa-2eb408f9058a", "comment": "Malware payload (ConnectWise)", "value": "b1c3070882a71893fbdc044e885861cf13301506d70205ec2a15f2b0ec4dd03a", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772431090, "uuid": "42a7c7dc-e6ae-48dd-bd0d-909a7f5fd251", "value": "T14C46E101B3D695B6D1BF1638D87A52696734BC049316CBBF5394BD392E32BC04E323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772431090, "uuid": "a2f3015d-f4e6-4538-898f-df3f710af16e", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772431090, "uuid": "60ac6a84-6457-4212-b99c-b3c00a1d8af4", "value": "98304:izIus6efPUIdoaxcp8wy5c3trGOlkQ5DUOgJ9zl:ihfefPtHxcp9ym3nltDUJV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772431090, "uuid": "31ea9ee9-7a28-4392-83e8-717732ac629a", "value": 5641536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772431090, "uuid": "fda7f6af-7065-422d-a65f-1b7ae0278b30", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9a348f3-14e6-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772434087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "02dbccdf-5c7a-47bb-ae16-86a6e87c02dc", "comment": "Malware payload (Mirai)", "value": "9658da5a8f2db98cfce333a91212cf65", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "33cf5f96-3aa0-4897-973b-8845851349ac", "comment": "Malware payload (Mirai)", "value": "61aaad25aaaf41bc1c8cff42643ed55330b3af416be0ec347680bf56a7fc1777", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "c2304711-add6-496a-8635-e382011f41e4", "value": "T1F804F104FF0D0853D0426DB44E7B0776D72D4A7A14FCE5AC6248B7970E62A7A829B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "49f19874-7b72-4a6c-8e37-bcd16da79f1c", "value": "3072:ozdurayQy5HEcMf3o8OLfz0t8vPwlzaPSZS56IzE/jVtG0ZbehOahWFYiqBQK:ozdurafekcMw8OLfz0yvPwhISs6l/jVG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772434087, "uuid": "9e60d86d-d569-4d44-b25d-61ffc8d03f59", "value": 186176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "87ee78f9-21ed-4ca3-b9e4-8d99946e053a", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "671f3254-14c5-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772434087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "bd86318c-30da-44cc-bc33-175217a14b77", "comment": "Malware payload (Gafgyt)", "value": "e291ecb0855c5ed97a9bee016ae7d480", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "e346290a-91ed-4242-801a-4ca6bc090e27", "comment": "Malware payload (Gafgyt)", "value": "89d5d443cacdb0ee2ca35fc46362eb7194481eed12a69567861e1053744135f7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "7f05c41b-0b3d-4c02-b6d8-0110ceb9ca9e", "value": "T1C5C3F146F88240B7F483917A444F938BBB31FF26510DDE63D744BB69AD332E618265", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "9897f2aa-067e-475a-a26b-ad2052b0c9ae", "value": "3072:qa3z5a9yc6DM41dVDTefX1d5LBLHucdraI1XY3zuxwcF2jTRh3SEoIse6:qqm10XdB6/LuoraI1XdmjrWN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772434087, "uuid": "502286c1-7ff6-4965-a23f-00049d36c288", "value": 127076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "55add6e8-49f9-49df-8a8b-75076c49286c", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "672f3fa3-14c5-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772434087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "67a58409-55b7-490c-aebb-febdff72789b", "comment": "Malware payload (Gafgyt)", "value": "52905d4184cac97c552844fcfe39472c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "6c832bfc-c158-4360-a799-fb49461ce83a", "comment": "Malware payload (Gafgyt)", "value": "4725da7cba1776e1e67297318988f98b222a338628e0eb3c4803df3012fb1f61", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "e14d83cd-29d7-428e-a191-9fe4ed4686ab", "value": "T1D3C3F185E5C2D7F1E28344BA105B9BB2AB30DE540048D6E7F79CBF21ACA2769D45F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "4cbb98a8-5b93-4c16-b354-1cef239f08da", "value": "3072:qa3z5a9yc6D/gfAw0KS5CxHm8TUaGSAM5KuOF+TpPssYtq:qqm10BdKS81jX5bPMtq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772434087, "uuid": "6656677c-e280-4852-a6f5-ed0316ec0951", "value": 127076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "aaa1be04-169b-44fc-ac52-fb00ef20bc2c", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "672f0f5e-14c5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772434087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "6d705e4f-e64e-42ab-b0fc-2c9d7ee78ed9", "comment": "Malware payload", "value": "f74ed8442b9e9062e08c2517b8ffd3bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "ffe8c05b-aa32-4c12-b2c1-c22104edcdd5", "comment": "Malware payload", "value": "ab358e2167c874c048d23c7d6ca3646f403b84c5321f56230d8362f36d98a146", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "20f81718-7ee4-4768-992a-8d152b8bebd1", "value": "T17204F18AFE914F9FC42FDF70055F136755ED85DA8AE2632B827C8858B18C245CAE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "b2cebbba-2081-4f52-a13f-c99cc2d2607c", "value": "3072:oDTIzc663gm4FNsHXLBuf7T1VbKghIQtZfht7a2e/LqIP6qrh8zrI36ce:rzR63rcAwLNyQt17hwLbPZuzrae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772434087, "uuid": "7996effa-70e8-451b-b269-dfa3a56c6812", "value": 180213, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "749e984f-81eb-4fbe-8f2b-a7cf6fa39902", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "671f4ca5-14c5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772434087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "d89e8de0-3552-4cfb-82b1-21c32af10c08", "comment": "Malware payload", "value": "c176045987d7370a72df8650b95d2463", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "597e4858-60be-4dbe-a332-d47b2764d0c4", "comment": "Malware payload", "value": "b5a52d2a9765c9985dd3df02b021c114a90c2142428a82666ea06cc0889e3b0f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "3fa56c2c-4320-48cd-9788-7e92c6845ddf", "value": "T1F704F14777014F61C339D47105F38A92F7F613E51792A28AAB2CD805AFAA38C650FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "fc577265-04c2-4ce1-99e3-4d830f169bf6", "value": "3072:kgfKVeEOH4lcgjZxOp2FpYCAPqodFKDbPJwNxdn5c6xW5P4s9cRuoBVsf1V:kbNR1POpApntDTJwZn5Hsfj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772434087, "uuid": "b9566836-f07c-459d-b382-4f4f3e703843", "value": 180676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "2e594f96-0582-4f9b-a593-d8f04d0fbcba", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67e91b67-14c5-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772434087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "8da59564-d579-497b-900d-7d689c8c08c1", "comment": "Malware payload (Gafgyt)", "value": "7828132a1cfe9c8bf9066ba388f6c889", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "74bd6195-5483-488d-835a-ecbaa2bde792", "comment": "Malware payload (Gafgyt)", "value": "d1bb4c74113654b35bc47415ab2b738a29171e12021461e7f2e3e331bc3b6e5a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "9f483f19-4537-4c68-96b0-79745f9b1c75", "value": "T157C30183FAE3D9B1E4474572049AFBDA9734EF2D4040CF53F7197A54A84A6A2282F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "704a3103-d963-4930-9da0-313bfb0e3fba", "value": "3072:rOlNTZa+Ef6jJ5GTQqGZe+2mqKA4p1FXu4WZqHaEmiS4ci:aPGfcbt/ZeBNKNFehq6EmfM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772434087, "uuid": "6bdf7bfd-9eba-4a0f-9497-ed91ab2e5702", "value": 126966, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434087, "uuid": "2eda2d40-e3a5-41e4-9a45-3f006817bd58", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9f6cb92-1603-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772434095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434095, "uuid": "5757562a-ada1-4277-8808-e7bc4fe04766", "comment": "Malware payload", "value": "915ef833141ef2e57cbf7c1b91320ade", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434095, "uuid": "00230ff5-96ea-424a-a677-f8d40db179ee", "comment": "Malware payload", "value": "e8bb69991932216c904ad7e57149f619cc2d76b5cbfe2ce959560bca126d20d9", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434095, "uuid": "aefb39e4-76a9-4ecf-9448-c991d5d7fc8d", "value": "T16C52E807F361C93ED8A84374445B4535B37AA814A33203376B5866381D23B649E4FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434095, "uuid": "972f59e8-977a-4ba9-a9a7-94a5f13c3a80", "value": "96:RK4uTNvB+B03DoQnoM4FDFp1BL1iIhlROe10oiVXAa3GL:R45vwG3DJR4FDF3p1zhlROe10oilA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772434095, "uuid": "a34f040a-33bc-4fc8-9f8f-da08e48d91fd", "value": 14504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434095, "uuid": "733de26e-3029-4a44-9dc2-467207a7b68e", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "673ca126-14c5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772434147, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434147, "uuid": "05f9bd5d-92ad-47c6-913d-47f207f1ad60", "comment": "Malware payload (Mirai)", "value": "85856518a225bcc13441328c656437f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434147, "uuid": "c08231cb-7dd9-4584-b598-4e5541f3050c", "comment": "Malware payload (Mirai)", "value": "b1bb2b68a28ca28c0d31ced9558df53275a7afe97985dbf4d636c342f81ae12e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434147, "uuid": "135d9cbf-da80-4752-a390-301876f54fb7", "value": "T106B3F262A791117DC58FC6BA0BB7E962F773B88477187B1E2245EA221F03F112B4D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434147, "uuid": "a96ce1ff-9e5f-4cbd-9fe4-7248cb35fd10", "value": "1536:NovYbQVtiDor3zXQKfDBnGO5DdAUYjA6964ca8MaCtNNdQwx/e0nIAvjSGNdMo9p:Nov4QV8U9D9uR/akpxW0nj7SGfHxs/u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772434147, "uuid": "029d5364-3f34-4712-b0f7-2f2a604b6248", "value": 115529, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434147, "uuid": "7956c3f7-7d46-4f9b-a31c-c03fafdc2f70", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9a9d6ba-1603-11f1-8b52-82aee05be84a", "comment": "Malware payload (AmosStealer)", "timestamp": 1772434148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434148, "uuid": "0299d1fa-1695-4585-af48-9e9ab615f8c0", "comment": "Malware payload (AmosStealer)", "value": "78e59679cfdbfc2832feaf9b918edb81", "object_relation": "md5", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434148, "uuid": "bec4ff79-bd63-45cd-87aa-a0d76592b3b2", "comment": "Malware payload (AmosStealer)", "value": "c8613819cb4978591f4d98edd56bf3fdcc9f52245778416406d5b1e582a7024b", "object_relation": "sha256", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434148, "uuid": "41457d70-40a1-45a7-9e2b-999ef908f2a7", "value": "T116C44B2720796440FC4532B9FBCBB6FBAE103D7207BC94B89E81C72359FA2759A451", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434148, "uuid": "203dbbda-5901-4c8f-aa19-e125bb16d2b8", "value": "12288:OlJw8AF9MMVLW4s2SEv8LWiR6/8JGYPdzj:OlnhU0ii", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772434148, "uuid": "fdebb80a-514f-4aa2-bbbb-c20f0a945865", "value": 551072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434148, "uuid": "a6a596ed-2821-41bb-aaa6-f5e1886c08a1", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc3ed925-160c-11f1-8b52-82aee05be84a", "comment": "Malware payload (Arechclient2)", "timestamp": 1772437991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772437991, "uuid": "9ffa42de-c645-41b2-b96e-45d8e66b3273", "comment": "Malware payload (Arechclient2)", "value": "df53bdcee28da26a33b90c4c55bb1ee2", "object_relation": "md5", "Tag": [ { "name": "Arechclient2", "colour": "#1b320a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772437991, "uuid": "b286c42d-07f5-493d-aebf-56bdb2f054de", "comment": "Malware payload (Arechclient2)", "value": "b7ada2d712c40a1c38e634d62215bac0a06d64662fe22b098cd32f019491f294", "object_relation": "sha256", "Tag": [ { "name": "Arechclient2", "colour": "#1b320a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772437991, "uuid": "b0eacf81-e041-4711-8180-4a6a4e5f0d01", "value": "T125A633A2C1FE8B21FCBFF5339E7DA2587463C21281948F64031B1B9704DD2BE99BA5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772437991, "uuid": "a27ef2ff-1e9b-43b8-b381-e657b0c8b690", "value": "196608:X/YV5tmdRRAkQWHA3bXDImgyu1dlIhlC9o+d/BjMN47L8Vl:PYZmRRQfwh1dUCeixEAAL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772437991, "uuid": "3dbe1f8c-b98a-456a-a8cb-1366ef84cffb", "value": 9625391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772437991, "uuid": "3a4a41f3-1253-49a9-a265-8ac3d7ac7a79", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7078a21-1610-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772439727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772439727, "uuid": "71bec033-a9a5-4f8a-85d6-d77d0ee80d9e", "comment": "Malware payload (Mirai)", "value": "70cef399a5fd8e34ce1f7baa24bbdbb8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772439727, "uuid": "dd849d73-3c64-446c-bb6c-5aeaee1f8389", "comment": "Malware payload (Mirai)", "value": "a8637beaaa6ffe1530e0ac209595b0a1769a56411cb983eb669226ab5a416ce3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772439727, "uuid": "1dfc1c8d-bbce-43ab-b714-4b8c3f89e0a2", "value": "T1B136F797B8824A43C4E43676BCBD81C833A74EB99B9713666D04FE3C3ABE5990D353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772439727, "uuid": "26db63b0-b4f1-4c99-86cd-967b69b2dc2c", "value": "24576:4mH90gf3e85EouaVamgXW/1ep/CAAJopdrAGVinVXHC0VRV4ChOzIs+7zY9PJgcM:pZeSCHOEyIW9BK1wwquumOANdIck", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772439727, "uuid": "af973432-b46b-4550-aaea-e7789bb1b3cb", "value": 4915352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772439727, "uuid": "c91b62ac-7974-4c28-aa3b-19a524d4e937", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16287d1a-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772439855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772439855, "uuid": "1bd10e4f-a8b4-4572-89f6-2bf3ca16a107", "comment": "Malware payload", "value": "ee9986b9d1c62cda420b671c6def4efe", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772439855, "uuid": "ad53ac85-b5ea-492a-a045-43509b088488", "comment": "Malware payload", "value": "20c9c9e9153564ee44ab7fa7bdb571956245c08859844048df1e8b8771505eeb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772439855, "uuid": "f35be8d8-efa8-442c-b098-6a534a92e515", "value": "E123018623663FB3D13158F5E7FCEF85A14A7D94AFE6180A7C227698A07135C28C8D1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772439855, "uuid": "c7ac5cbf-70fb-45de-9f4a-dfcd0d9c6117", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgsK:yYI0ARqw1qAEv7UIFM8oJorFK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772439855, "uuid": "5c331bd3-4900-4e13-939c-2a563fea5564", "value": 49232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70b3c064-1612-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772440388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772440388, "uuid": "9ebd0111-3bcb-482c-81fc-180bc3863ed3", "comment": "Malware payload (Mirai)", "value": "cc4a95f57ad8a05f63ec5d41dfd44314", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772440388, "uuid": "c6cbffd5-6741-47e8-8229-ada5491da952", "comment": "Malware payload (Mirai)", "value": "17296f1c33dcd1d9ac5c6dea68d0f1d83c689d775a0e45fe9f5658d9c4bcb29d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440388, "uuid": "36f9fb3a-1129-46cc-a825-e9823312cfa6", "value": "T181361997B8914A83C4E43676BCBD81C433A75EB99B9713666D04FE3C3ABE1980E357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440388, "uuid": "a17200f2-5a43-4437-a4f6-91912c0a4904", "value": "24576:Tfmr2UrHZrNzUAx8wPH6FhIIrzcpiKry2E0QB8e78Lst9zvfNA/iOcWnYdOjV31X:kuKofJ+ACI6Z6NituFkINlkNHXEr0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772440388, "uuid": "576c6f00-40a1-47f0-9356-424bb3bfb666", "value": 4915352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440388, "uuid": "5617aeef-bd6e-462a-9f71-1f16f1db2192", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f7251bb-1612-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772440439, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772440439, "uuid": "40c35986-5629-41e8-8e58-7e3ff3cd98bb", "comment": "Malware payload", "value": "535170a5904f4aff1de27c7efad22a99", "object_relation": "md5", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772440439, "uuid": "31f1e092-a0df-489e-9a65-d429f4ff71ac", "comment": "Malware payload", "value": "9e23bd94d834052e574ce7ccbae8bcf22d4aee4d1da61954930ef469c594bd46", "object_relation": "sha256", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440439, "uuid": "25ac8102-63ee-42af-ac20-aa31c3ecce77", "value": "T18CD633628187BD17C8508098364A77BC97B399BBC2C7CFA2E7814DF9D1B448BF9251", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440439, "uuid": "abfba69d-b7e6-4a04-ba27-771371f00c10", "value": "393216:VyYPvGmvSOsl3GbbCgVInLA6HF5DMM4ZE0F4dkvyKFIk:5nG2bCgVuLB5Lj0F4yvyeIk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772440439, "uuid": "8e641418-6ff8-46a0-8b36-f63a386b6937", "value": 13187838, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440439, "uuid": "8adc22c8-302b-458e-b692-5e29587d3e2d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f5b6fe4-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772440656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772440656, "uuid": "16763ab7-9744-4d2d-bbe4-3583c48ed41b", "comment": "Malware payload", "value": "316b10940653b65ccadb5c0dca88b921", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772440656, "uuid": "082bca9a-855c-4b8b-b340-5889a5bcd54b", "comment": "Malware payload", "value": "6b09183fdd3eb3af13a88f61d0534bfb15a3fd30c2129ad51f51a7359ea7b1d1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440656, "uuid": "4808eabe-cb8e-4188-b6de-29e6db4eebee", "value": "1C831229135524E5D62280F1D7FD1F84AE591F698EE2EC15BC12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440656, "uuid": "533f0a3e-250f-4f6b-8232-138c00ddc480", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uB:yYI0ARqw1qAEv7UIFM8oJorFquyjkRk7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772440656, "uuid": "3cced5b5-e87b-446a-99f9-add129335606", "value": 82536, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dc004ef-1613-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772440812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772440812, "uuid": "e3cd1749-4ea3-4322-acc4-5844b2ff1c53", "comment": "Malware payload", "value": "6ca5cb9bb2aa419331c71ef891b9f384", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772440812, "uuid": "7fa7e5bb-7abc-4eb6-a299-367339e8b70e", "comment": "Malware payload", "value": "55e62b9bb7ee62c128bf430e71a660acb03d21a623ec6abb31548f9f7c1f63e6", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440812, "uuid": "4849f723-0bf3-4a65-8337-9b77e1a9a4d5", "value": "T1D1364A47FC9545E9C0EED235C6629292BA717C484B3123D76F90F7682F72BD4AAB93", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440812, "uuid": "f50c881e-57a9-41b6-a767-9d9347cdcb33", "value": "c2d457ad8ac36fc9f18d45bffcd450c2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440812, "uuid": "18f47ac7-0395-423f-89d1-495ca40804f3", "value": "49152:NJJEH53GURKeIdw8MrHWlEA5ShmqKqrjLa5N5Eb/pUtXr/A/oHmx:8TR6m8Cm5SAqKMHsDEbirYf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772440812, "uuid": "65d0e494-27cf-4030-847a-113eddcaee7c", "value": 5219840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440812, "uuid": "55ad1916-c201-43d1-9366-bab6d076eff2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa9580df-1613-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772440914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772440914, "uuid": "a72c3394-5e5b-4e36-a498-e9c05814cad5", "comment": "Malware payload", "value": "835e1fe36be30e4516dbcda579ac9253", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772440914, "uuid": "5f7778af-aec0-499e-b378-9ee92442e4ab", "comment": "Malware payload", "value": "f809c8bfa3141026900139b97a10ca7cef3f4fe9a7009b517f6edd5078be6bb8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440914, "uuid": "1dffebb5-2878-442d-b05a-3c8399be454e", "value": "T1DB34CD39E7922C81A7AC13A0B8D8560E6F51B8114C3F9F2C8BBFE44257B9E5875F9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440914, "uuid": "7c160bbb-d2a2-4489-98d4-aa1d70eef968", "value": "6144:OZWXbycmQlJbWf2OnnO9+vKMc/YymMPyGsiysktP2s:OQnmqkTnOMCFeMPHJyD9J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772440914, "uuid": "9226d1d0-c8ca-46c1-ba3f-36a0f9c59836", "value": 239699, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440914, "uuid": "bcda21d3-b7d5-405c-9436-478db6ae8559", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ab98a39-1616-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772442096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442096, "uuid": "f917a251-64f9-4d13-82d4-c9a48ea22c52", "comment": "Malware payload (Mirai)", "value": "ed5fd797b333c4805599089710d02743", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442096, "uuid": "c5b7fe46-becc-4d73-a55f-c8b069b5244c", "comment": "Malware payload (Mirai)", "value": "a40e1720588f474a72a15fd8c7af98eef0f45127976a5a865badb7689882b6eb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442096, "uuid": "aa33806d-542e-43e7-ab77-263acd287846", "value": "T115810A9A71420BA42E29EE23977DCB195F8194CED4DA1FC5F3EA5AB18D8CCC83D501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442096, "uuid": "42887eeb-3bf4-46dd-97db-84ca3c2162fb", "value": "48:vIdjUIa3UIf/flUIB3UIQ0EUIFVUICfUI2/UIXNUIqfUIvLUI7/UIAHUIE7UIWvn:vgUvUmUcUSEUUUnU5UuUtUOUCUlUlUTn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772442096, "uuid": "0d57a53c-8125-450d-aa20-79492efd2c0f", "value": 4110, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442096, "uuid": "0431fa5d-514c-4c40-a76e-020bbbb836b1", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f59e1bf-1617-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772442587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442587, "uuid": "b4c3080d-8c60-4aaf-ac8d-cdaafc3e41f8", "comment": "Malware payload (Mirai)", "value": "240356ff93e33e956289449fdeef4883", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442587, "uuid": "d3632394-623a-4036-9686-8120abcb4dbf", "comment": "Malware payload (Mirai)", "value": "8181037f0fb0648e9faecdfde8ba2966a343be10d20aee7a6be3cbb024a293c6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442587, "uuid": "56245b85-dc59-41e9-a06a-d7da49a743b0", "value": "T1D8365B98FC1DB562D9D87AB43F2541D87235FC49AF4183237614FBAEA9F23548F222", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442587, "uuid": "5279ec79-eea2-4789-8df5-8baa6bf7afe9", "value": "49152:Nb8aS3ek1JQLRPbf4rld6dUx/g6RM5ElvkKnqkxPV:NwaS3N1+PbQrlQdUx/gERqg9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772442587, "uuid": "85efc5e6-f12c-448f-90fb-587548810142", "value": 4915352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442587, "uuid": "aceecc61-b73c-4500-ac93-accb907c2501", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77523479-e19f-11f0-9c99-82aee05be84a", "comment": "Malware payload", "timestamp": 1772442788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442788, "uuid": "eb350f96-c3ea-409d-b5fa-2eadaf55db0e", "comment": "Malware payload", "value": "ebbcfb749a959fb53e9fc8b6dc915838", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ArkanixStealer", "colour": "#e0ae21", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PXRECVOWEIWOEI", "colour": "#46EDF1", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442788, "uuid": "c1a22cc6-957b-4468-bcad-70bb8bf26133", "comment": "Malware payload", "value": "3f4c3c16f63fb90d1fd64b031d8a9803035f3cb18332e198850896881fb42fe5", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ArkanixStealer", "colour": "#e0ae21", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PXRECVOWEIWOEI", "colour": "#46EDF1", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442788, "uuid": "db4b96b6-a450-4c94-bb17-37298129721a", "value": "T17D9501321243BD9FEBAB0FBCD28236980C393D572BD155D8B6CC469215D5AD8CEAD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442788, "uuid": "7d88131f-3bb6-4fa0-802f-b61c0e985ffa", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGC4yczQDBoi0Ft:8UixbItdTrJoFVPMvXGni0v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772442788, "uuid": "6dc0ecdf-4941-4697-bd92-ddb0c819e0f5", "value": 1969672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442788, "uuid": "974ab5ef-78fa-430c-a132-51d3950f076f", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f40195cc-131f-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772442792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442792, "uuid": "fabcb408-95e8-4374-a7eb-a80c3fe89213", "comment": "Malware payload", "value": "2ba43d11e1160ca31b4275794706d5bf", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442792, "uuid": "8f7e6d45-c472-43d7-b180-6290c34b7058", "comment": "Malware payload", "value": "7b0e05ace5ddb02f3fc8f664d09f795a642a2d77a096a86d7a744e705a94d620", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442792, "uuid": "72541c59-63fd-434b-948e-c3f84999706e", "value": "T16DD5AE765207FED6962A0DACC4543E002C9898E7472282E8BE8C47DEF19E554EDFCE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442792, "uuid": "e365becf-1350-4c48-83ef-afe255a49dc8", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGOzd23wzXlMem8:8UixbItdTrJoFVPMvXGu1F4o4oWaK3e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772442792, "uuid": "dd223a50-fc79-4fa7-8e58-980181dd524d", "value": 2999805, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442792, "uuid": "5d42040c-b0e9-473f-afaf-ed7d35a848ec", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffae7356-1618-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772443204, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772443204, "uuid": "40d54509-b928-4fc8-b78c-fd36aed75f3a", "comment": "Malware payload (Mirai)", "value": "9c00e95ac5706e48d50baa292667d2f9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772443204, "uuid": "a3af98a8-eafc-477b-a1e4-d3ae022d8f03", "comment": "Malware payload (Mirai)", "value": "c35fc61a13aa65abf7d5cf2e6a201e241146b0f80fe75efb60e7518f07c8552b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772443204, "uuid": "6687a058-9310-4d64-86ea-66e020fb9246", "value": "T1A74618177A28D70ED628223458B1CED56B792C4645D6A527F391F309A8F20BD8E6FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772443204, "uuid": "b1d3b6c1-991c-4826-b0af-42072236e0aa", "value": "49152:QPEV727Y0PsgOlvDXfageRhuNAkZ+uxg+ujHGbo6CgV+yMSoIn7j/oDcZJutZws6:x0j8lgtZ70nb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772443204, "uuid": "d3af8696-c0a7-46fe-a7a1-4bf20c5c5103", "value": 5636279, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772443204, "uuid": "fe83eb0b-7981-4757-8e08-fce6fe6c6197", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d661e284-127e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772443508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772443508, "uuid": "61f9066d-ec01-4398-87ae-e92e27814d09", "comment": "Malware payload", "value": "364df0b28fe7d188eeb3130d5f3643ea", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772443508, "uuid": "70c1102a-4b1c-4105-8116-c5f30f3a3a0a", "comment": "Malware payload", "value": "4f5a0ad75409e099522c26c62f179a8dadf51c1597ef21fee8434361ce136fa0", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772443508, "uuid": "e9c53938-31dd-440c-9630-bffdcb208ba9", "value": "T1F0B5C07A1283FCDAEA271DA8A51036510C0978739B7554ECFECB0B85D4DA158DFB8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772443508, "uuid": "2d41593b-d813-4a03-8b0e-d0bcbc80db99", "value": "49152:8UixbItdTrJoFVPMvXGt60p2NsEJEsoNxYqtzdOGR:7iBI/JoFdMPGn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772443508, "uuid": "f4270981-1b05-43b8-b3b3-9c6bdb7f821f", "value": 2401789, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772443508, "uuid": "dfa2d196-f9aa-4a60-a730-2262b41bb881", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f70826f7-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772444049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444049, "uuid": "4089dba4-3886-445b-b198-bc6277fc9f80", "comment": "Malware payload (Mirai)", "value": "7601c53353307ea03234d06f703898ba", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444049, "uuid": "9873aa88-460a-4972-b05f-ba14df41af5b", "comment": "Malware payload (Mirai)", "value": "18146e589112802a694ed4bde7815a0c010fbba5730d3dba7fbcc62a2ea541aa", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444049, "uuid": "a4f3f400-7424-40df-a6a6-dfadd40ccaa0", "value": "T1C8E32A30D4504B17C2D213FAA79E825E3F221F9793DB33115B38BAB41FE279A1D699", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444049, "uuid": "4876ad4c-a931-4735-a9e4-6798ae50cb8a", "value": "3072:Cv/WwsLgaq353qHiCOvhOpVqkDQHbeskmhxQwoVSUNu:KPLaq351hOpVqkLskmhxQwoVSUNu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772444049, "uuid": "1df169f0-6043-4733-9a3c-d2798d5230fc", "value": 143019, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444049, "uuid": "d21ae1ce-3f91-4eb8-8291-4afe4a592ec0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f780046f-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772444050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444050, "uuid": "9ccda4a2-1423-4fa2-8c98-724b9a6174b9", "comment": "Malware payload", "value": "02fea3b13dd129956030d5104bd37008", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444050, "uuid": "4f6675ac-7106-4c0e-bcbd-4d586fae1eea", "comment": "Malware payload", "value": "41ac10108b6d118ba6e27429d4cd12805d56d2898d61c9a7808f8a43a21f1d22", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444050, "uuid": "f5527407-f0e2-4ede-b5a8-2a40ce14e8e8", "value": "T1AD33E044C7E4960EEABB793E556A2143D629B5ACCD00AF4D03B014ED4EA7F516F23C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444050, "uuid": "a819885d-fb96-40b7-bb31-7f30b96970c9", "value": "768:8rGty4jmVk6iJmSYrNZdnq8ObKbg2qaRXZCPop2vYONLt35735a35DCkiCk5CkO:8rQy4dJYrN7nq1VaRJES2vZnkFk4kO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772444050, "uuid": "bdd872fe-72da-4148-9abe-769f3a16574a", "value": 52789, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444050, "uuid": "70ebe167-a0c4-4cab-a35c-093173aae759", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f92d0b2a-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772444053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444053, "uuid": "f6a955a4-dd6a-4c4e-935a-b8e54c9f2a53", "comment": "Malware payload", "value": "d48ba3a1be2f960e3b7a84a0479ddea2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444053, "uuid": "615f39fc-87a6-475d-ba6a-4b46a012ad5f", "comment": "Malware payload", "value": "e10e1f305d3bdb44ec79685264ded1052a739b69ce10e0005fd4ea1aee7dccbe", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444053, "uuid": "c973ad05-9931-4acc-a397-fccf74cd3c12", "value": "T193451221FBF941B2F28A157504BA772C667BAE815724C2E393A43F1CED323C19D391", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444053, "uuid": "91a47bf2-865d-4bba-bfc0-47a1beaac570", "value": "270319a845d916cc11f9ac242935014a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444053, "uuid": "89a7d787-fc67-4534-bd84-d039fda1e7c0", "value": "24576:Tul20jI1QMIsopqyEzrJTwcL6e9TOJ6cP3rGRfP5Ok4I/bJ:Tuw08RopqyGrJTteqT0zP7GKkr/bJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772444053, "uuid": "108b63bc-62df-425d-8353-345c0cd5f561", "value": 1228645, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444053, "uuid": "ebf0969c-7502-4ea4-b714-7a820bbde2fa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa696af6-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772444055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444055, "uuid": "4efc92a8-b6e2-4069-8027-d3479ab510e7", "comment": "Malware payload", "value": "08f0dbb5d881cd3258a7abb14835fceb", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444055, "uuid": "1741432d-4a35-402e-bea6-eb34c0669ae3", "comment": "Malware payload", "value": "b5a9f57f709c8361366bb4b03633e0859749056bac916dc5907c01b00e78b8b2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444055, "uuid": "e801918f-c8ae-48fc-846a-9163adf69ea8", "value": "T1051633A4F811576710BA379A782F16DE48E31F722FF167639298C39A18F87424F143", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444055, "uuid": "a277417c-0f44-4448-9bb7-3ae49ba96eb8", "value": "98304:Dgyg/dnjml2wtVtSeLpBZwDVSSMvRyhP4bkOll/FK2KFprOZm5a:DgymjmlXVtSelBq4b585Os5a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772444055, "uuid": "a4e6cf6a-3e65-4aec-bd15-6ead4b5c935d", "value": 4028749, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444055, "uuid": "08cce1ef-bc56-41d8-850d-6a343d149343", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c43b248-c9c2-11f0-85ba-82aee05be84a", "comment": "Malware payload", "timestamp": 1772444057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444057, "uuid": "ed3a0b1e-9f2c-43be-b57d-64d4003c6ac0", "comment": "Malware payload", "value": "d8ed7ee1cd96bef8da800309f325f260", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444057, "uuid": "b0d1e2a8-1beb-4a7b-8913-c5a3c14a4e01", "comment": "Malware payload", "value": "c11f178e5090f36f97758fbaca79ec460f890cf14bf71e5a68077c8e43edd0e3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444057, "uuid": "ae2cb39c-1836-47f4-a0d3-a837a9e68bf5", "value": "T1C846F1C6F7D8A92FC8775072C9BE52B141874C028A839F836D18760C69BB5D46F5AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444057, "uuid": "86dbd898-8d74-42f7-8c21-7c337c45a9a3", "value": "98304:xPtoTwrYhKjofsros5OrsbxYfc0D1BWoz5qPvrEZC0vPqmYZnXrfLR/mpCltX:x+KMfyaIbaciAFvrEZpXqmY9XrF/mpCb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772444057, "uuid": "52cca59b-4053-4421-813f-b003512502f1", "value": 5868330, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444057, "uuid": "89c058bf-42aa-41e3-9ca0-bb5d18c951b2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcfb2035-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772444059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444059, "uuid": "562f6aa6-90ab-4bc7-a90f-46fa290e1a66", "comment": "Malware payload", "value": "eda8015f3d9c7c462b2018e72aba89f6", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444059, "uuid": "5824f443-b93c-4a76-a67d-f221403e975b", "comment": "Malware payload", "value": "8613f7b6df514d53aa419355b0a3e8d032b8448bd45296d4158b848998015e3d", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444059, "uuid": "beb1d8ee-fb71-47f2-bfed-db97ddef2d8a", "value": "T1E6A62245EF59DD2EC47740370D5A5335620AAE2FC7828343DAEC361978BB6E40ED4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444059, "uuid": "9d6a8825-6fca-44c9-926b-57ee45046e6d", "value": "196608:OLFSGeYf+YOeW52TvfFiE8i1UWUf+5vMFFtYbgF6Bqm:OR8Yf+/eQ2THDj1fE+obn6Bv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772444059, "uuid": "9a4c38cc-1e69-40c4-8f1c-a40c8244b44a", "value": 10165611, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444059, "uuid": "21c5e89c-711d-4e95-a10c-a0e07f721384", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "027b9fa4-161b-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772444068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444068, "uuid": "4586fb56-0963-4ee3-a0b3-32935565c2d0", "comment": "Malware payload", "value": "9248106575947e1ae7e64626497ead56", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444068, "uuid": "78dc3a6c-e892-4a61-b960-cea303dd93ec", "comment": "Malware payload", "value": "327dc850fb31d747951fa894dd7db9b97a1ee6b9f9df564c182b8765e2d1d15e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444068, "uuid": "7bfb35d4-1aeb-452d-a146-c67cb68c79e4", "value": "T12C573397FB19883FD9BA26738D6A113237729E0186926B133944772C2D7329E4F49F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444068, "uuid": "9010a045-b1e5-49d4-86e3-5b39f5e6bd0e", "value": "786432:mkwbUoFO7ZPzRKfhyvY9TxnHjz7vAMuAJuNkbEagk:mBZFkkyA9TxnDwMuAUNkbRgk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772444068, "uuid": "1bc21bd8-9740-472e-9442-be5701196d68", "value": 27477214, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444068, "uuid": "89e3b966-fd05-4aa5-87a9-dc2cfc888caf", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06203da3-161b-11f1-8b52-82aee05be84a", "comment": "Malware payload (SpyLoan)", "timestamp": 1772444074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444074, "uuid": "b02467d4-3d72-4bf3-8f6d-1f1935a246e6", "comment": "Malware payload (SpyLoan)", "value": "91d2b6f18b178de65149006da8585cbd", "object_relation": "md5", "Tag": [ { "name": "SpyLoan", "colour": "#E515C8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444074, "uuid": "22258589-09e5-4cc2-9a94-8a4355a23c64", "comment": "Malware payload (SpyLoan)", "value": "7ec1cbd8c767a3d87a62fa7da3574da2ba56df753511609bd8d179bc1d2d635e", "object_relation": "sha256", "Tag": [ { "name": "SpyLoan", "colour": "#E515C8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444074, "uuid": "a66da09b-357c-42fa-a608-5e31173de356", "value": "T102573397FB28883FC5FA12B39D6A113277729E0486926B173984772C2D3365D4F89B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444074, "uuid": "727f6976-c969-4110-9fc1-a4491b37b84b", "value": "786432:FBS1GPzROtfXyvY9Txn8jz7vAMmMyqCG6C6zY81wptWP:FUQUNyA9TxnuwMmMyqCG5JgP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772444074, "uuid": "abc25d91-2c3f-4644-84c4-6b41806de162", "value": 27984623, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444074, "uuid": "5f480d0a-e8b1-42e6-b218-56689783af1c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ec85e4d-161b-11f1-8b52-82aee05be84a", "comment": "Malware payload", "timestamp": 1772444089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444089, "uuid": "1bad11de-0daa-4cc6-8d72-2c26d5d880e0", "comment": "Malware payload", "value": "19c09e0874737d72da00ae4354d9bd51", "object_relation": "md5", "Tag": [ { "name": "Malgent", "colour": "#a071f9", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#2b8df4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444089, "uuid": "8c86fae9-3856-437f-9288-063db8b67a8c", "comment": "Malware payload", "value": "4c7f426035c2a148109b85da6d7827d0d05c99604b8f71e820bc4ec7d8f92201", "object_relation": "sha256", "Tag": [ { "name": "Malgent", "colour": "#a071f9", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#2b8df4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444089, "uuid": "8cea719f-7ae2-4510-b179-4cb864b590fa", "value": "T13687339ED0DEEB21EA8BC2028A24F954B1D334D2B779415159FAC6E3707E613B2377", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444089, "uuid": "9ed0147e-4f36-430d-b740-39cd0e5a379b", "value": "786432:kMu1NLBmo5W8qhb6pFQUPLIspnvVDQVc2YahJ7r:W1LFk8qd6rLIspvV6YmX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772444089, "uuid": "2e22daa6-a091-49fb-8d0d-a970711eea8f", "value": 36154684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444089, "uuid": "7ae36304-978b-4bbe-b710-740ec5fe5b86", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8e0e643-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1772445370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445370, "uuid": "33e2c3cb-4b92-40e3-acb6-012fdf80f88b", "comment": "Malware payload (SantaStealer)", "value": "b6fc99763722c927d5cb4c1cf20a0e35", "object_relation": "md5", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445370, "uuid": "aa760ad0-f5ea-4e54-ac95-f0df8bc6c57f", "comment": "Malware payload (SantaStealer)", "value": "1222fd13b3aa49effa09d0076959ebee85a94bc85e73aa406c86daed6a2d57b6", "object_relation": "sha256", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772445370, "uuid": "cce614da-4ce5-4448-a37f-078036d06729", "value": "T141C5AE0AF1534AD5CC9BC0BC839B7131EA357D79CE282E9B17918B613E45B807725F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772445370, "uuid": "45da590a-d739-4975-ac5a-f217c2456b6b", "value": "aa756d232dc6341b93de4ea08c5fa368", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772445370, "uuid": "cf3f3faf-f0bb-444a-b2cc-076c6d06cc17", "value": "49152:xKVxKbdjNu40J41RC/oKCQOydhYMJucKK6q3MqCc/9kvOl2:xBbIMC/oFQOyrYMkcKzjw9ko", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772445370, "uuid": "c489d9e7-ebf4-4868-b112-b6c9e1f3f84d", "value": 2636288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772445370, "uuid": "c1ebc3c3-ebb2-41f2-8a32-91a1931c55e5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bb6c6cd-161e-11f1-8b52-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1772445372, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445372, "uuid": "d4dcd4fb-c9be-499a-a74e-be5c26accc7a", "comment": "Malware payload (SantaStealer)", "value": "e5e3b3bfff655fec7025dd0b8d4b750a", "object_relation": "md5", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445372, "uuid": "8a3779e9-6070-4abc-a9e6-09a9c73ca1de", "comment": "Malware payload (SantaStealer)", "value": "920c14eda01cf12ea3cc4d22a783f3f93af7143c4e3002d5d8f29af6bec5977e", "object_relation": "sha256", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772445372, "uuid": "cf44c7b9-ab96-4a52-b317-7829b31853a2", "value": "T195C59E0AE1538AD5CC6BC4BC838F7131EA357D69CA282E9F17D14B613F45B902725B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772445372, "uuid": "141c02d9-b94b-43c7-8c33-9f18f1410ab0", "value": "44968aba445081de5cf91bc098461354", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772445372, "uuid": "367c67e8-6d8d-45a2-aa46-c2aa2b5bc848", "value": "49152:2avY1Sn5eVNoaWFjeZRc+9sNfBZSOwKHRjUk4Pzt1nlCTsdGK:xY1aiUevc+9sdBg4x4DPPn2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772445372, "uuid": "368e907f-9ebe-44f0-8297-480ad68f9dc2", "value": 2662400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772445372, "uuid": "32dd91c6-81d6-43c1-9baa-47a9d7a247f5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bb70ce1-161e-11f1-8b52-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1772445372, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445372, "uuid": "97e05103-a193-4ea0-aa15-ae188c7d4680", "comment": "Malware payload (SantaStealer)", "value": "eae7c190bdc5dd0ce90a009451e2ad7d", "object_relation": "md5", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445372, "uuid": "0cf9415b-aebb-4ddb-85cc-64b4702af3ab", "comment": "Malware payload (SantaStealer)", "value": "e8003647df15edd32d45b78831e806de2426846182ecb80ffd59271dc696a82f", "object_relation": "sha256", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772445372, "uuid": "23b177c4-e657-476c-982c-8760579381f0", "value": "T107C59E0AE1538AD5CC6BC4BC838F7131EA357D69CA282E9F17D14B613F45B902725B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772445372, "uuid": "1cf9237a-cb65-4f47-90ee-7fd04b246fb6", "value": "44968aba445081de5cf91bc098461354", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772445372, "uuid": "2f8fe811-a1e4-4889-988b-b1b3327eae12", "value": "49152:5avY1Sn5eVNo9WFjeZRc+9sNfBZSOwKHRjUk4Pzt1nlCWsdGj:IY1aVUevc+9sdBg4x4DPPnD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772445372, "uuid": "2f693ce6-fee8-459a-807b-5d34c6165131", "value": 2662400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772445372, "uuid": "80e6ace8-0edf-4261-a810-ef9a220674a3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f82adef-1625-11f1-8b52-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772448573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448573, "uuid": "d6787897-c2fe-4d85-9337-3194f862ed93", "comment": "Malware payload (Gafgyt)", "value": "0fd0c71db16a2072586a87ba7343b6d8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448573, "uuid": "1d493cf0-1dde-4491-83e2-ce6b0a8ac4a7", "comment": "Malware payload (Gafgyt)", "value": "8d16dbec28b0eac707f683fa3bafed35884d4af7dd36db842afc84c196b39a71", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448573, "uuid": "aef5068d-e0c1-469d-bf49-71482b811d69", "value": "T147C3E730E8044B1BC2D223F6E75A869E3F351E9797A733155B3879B02FF27991E295", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448573, "uuid": "10bc3a94-cc89-4ff1-931b-0765dd11ae0f", "value": "3072:4jDy/+mh1vtbPIKavbpcUPium7/L7QsvmGfIiNb:mOJ1vxfavbywm7/L7QsvmGfIiNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772448573, "uuid": "9e6a99cb-739e-46a0-9ef5-d4973a001602", "value": 125008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448573, "uuid": "22ec013c-510d-401e-828a-cee6e42e7322", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f82df96-1625-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772448573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448573, "uuid": "709d5026-c64d-4dff-8127-53cdc5e8e22d", "comment": "Malware payload (Mirai)", "value": "8a6a55095990875bc695bc8a29c21175", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448573, "uuid": "0c67ade5-3ea6-4848-b015-f2fdcc732992", "comment": "Malware payload (Mirai)", "value": "a72ab10dbb8aede27fd43841e001cdcc4a3f9585bbcee192074ba9b3785d24a4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448573, "uuid": "bbf6a2c5-9ee8-4eb2-b289-9ddd6dbd35d5", "value": "T1C3B31977A4654F73C045A5F125BA9A310F12AD931B1F1A88763CB6B04B3B4CEB84EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448573, "uuid": "848b16f1-a722-4b7b-b676-eeabc7703de2", "value": "3072:MDVLSItJP+Xsp4JlN3HBjmH1cuEgvniuN/:MDV+ItJH2l3HBjmH1cuEgvniuN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772448573, "uuid": "7ba7c8fe-6689-4228-97fe-b4f528687721", "value": 112633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448573, "uuid": "bfd39e40-e874-4590-a9e3-cd0d1ec8a2e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f88c647-1625-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772448573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448573, "uuid": "535db8b9-7243-4fe0-9b46-8a5d221f4f91", "comment": "Malware payload (Mirai)", "value": "ad6b08f218d99471cf8c7a0744aecff4", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448573, "uuid": "18a6cc43-c23d-4430-9773-852369922621", "comment": "Malware payload (Mirai)", "value": "c2405ac1841c76fca51540329b0cf58de31598981d4230975e830611d9ecb387", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448573, "uuid": "c14275b6-4aa3-435a-97a8-1379157b3ce0", "value": "T1EFB3F872B804DF66F00A96B504D38B367E30BFA70E6316A2731B39669D331D528A7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448573, "uuid": "82edee62-ea1c-4d24-955a-885b91e77795", "value": "3072:Ydg8GXIDvGIk1MG8+mjypvZWoamm/QcuLB1niDNb:YuFX0GIk1MHyphTamm/QcuLB1niDNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772448573, "uuid": "4f5289da-03ff-4994-9aed-325f20bdd88e", "value": 118090, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448573, "uuid": "6e6e50d1-cd49-490d-81e0-bc590ed49f96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a01eaffc-1625-11f1-8b52-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772448628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448628, "uuid": "aeb35b6b-2a7b-415f-a3ec-8d0313ee4877", "comment": "Malware payload (Gafgyt)", "value": "3ab5aaabbd94f354bc2fa9fd52d90a58", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448628, "uuid": "aa145fff-7838-48fa-a5ef-2a9f82bb50e4", "comment": "Malware payload (Gafgyt)", "value": "4ac504cfe7f164bf7497f10fcfdd58426feb62aa4d02b0e2ba0afa28d756df1c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448628, "uuid": "b77562d4-6849-4961-a282-52b694f0e697", "value": "T1C2A3F872E643CAB2C4430AF201A7DA6B0D21BE6B0A7A5A85F31C7CB09F334C57655F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448628, "uuid": "66db29cf-7c64-429c-9c54-0a6ec5dcc197", "value": "3072:wW8FUmgujld6Mkxm6AJ+4f7HmmFVcqq0GnDZT:wJFv4Lm6AJ+4f7HmmFVcqq0GnDZT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772448628, "uuid": "21bec5a2-54f3-4643-bde2-77a1269f03a6", "value": 104138, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448628, "uuid": "c96571b6-6b0f-41ab-872d-504a837bfd9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a02226a6-1625-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772448628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448628, "uuid": "83428bb3-7cb9-4d30-a50b-2fb8bacc4fdb", "comment": "Malware payload (Mirai)", "value": "df430287b84049aaa691fdf0e710799f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448628, "uuid": "3d48afd5-1b84-45e1-9db9-b27abe222d63", "comment": "Malware payload (Mirai)", "value": "96edc54691cdf5f3a16b54871583e3a0ba134b92c12ae1ef7332db3dc6b7b189", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448628, "uuid": "81d1ead6-60f0-4632-ba72-d305eac175ab", "value": "T1F9B33B376251C97AC08356F426EBC5729D13BCBB0B32319A33D47D60AF368DA1E99B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448628, "uuid": "9d29be93-62a2-410d-b2cc-1b82ee7ac0b1", "value": "3072:kiry859a2ADJf9wHYqbgFFo8+HeAJ+TRCm7FnVqfJXFWbNb:T9a2aLqkrMUsm7FnVqfJXFWbNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772448628, "uuid": "2ab8b639-81b1-4353-bc5b-9323d8cd2bca", "value": 116503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448628, "uuid": "9ecf1488-4196-48ab-962b-be6770aba163", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a02d1b69-1625-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772448628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448628, "uuid": "722caff2-73e9-4d5e-9275-2a2f5a01a813", "comment": "Malware payload (Mirai)", "value": "538f48a8c4cf0289f185efc64c383df1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448628, "uuid": "9c4d7fec-380d-4c67-b762-bc6ce9bd9217", "comment": "Malware payload (Mirai)", "value": "667f72e7d0bf5565febecc66907b438534796163d4c20872162688512e84e6c3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448628, "uuid": "e8451e61-61f3-4e93-a36b-27814879a658", "value": "T18EB31A37A61C0B43C09B55F02DB77BF24F69AEA313A611C46609FEC04B73AB22551F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448628, "uuid": "4a79b927-4e2d-40f5-9482-d2000c221b3f", "value": "3072:pC/4rdZHsXsZwwR9zNk5mm/QcuLmHniPNb:pCwrvHwsZwY9zOmm/QcuLmHniPNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772448628, "uuid": "ab3ebb1e-a20a-4fbd-a5dc-584a103ba207", "value": 116786, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448628, "uuid": "1b08db99-eb71-49da-8f74-22bd82fb04ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a02d4ce5-1625-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772448628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448628, "uuid": "34199aec-4b88-49fb-8b8f-0157ad3c8dab", "comment": "Malware payload (Mirai)", "value": "871c544b83d6c6e499b3731abf49ff3b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448628, "uuid": "82122cc7-502c-4c65-b84e-fe5cfadd1c05", "comment": "Malware payload (Mirai)", "value": "2820126eb8ed1daedf78e7afd5c2c85b149e7ded97e21068f3de4136809c8682", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448628, "uuid": "620d8e65-085f-482b-a266-d6f1cebfec10", "value": "T162A3F831A641C973D04305F212A7DB660D32FDBB1A6AAE56E32C3CB0DE360C5B565E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448628, "uuid": "b00f738b-50c2-42f7-98b6-8936b3d9fcf0", "value": "3072:VK1z13U6HzHoXRtmTUhQogXEmmFVcqq0GnDZT:VK7DDeKlogXEmmFVcqq0GnDZT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772448628, "uuid": "9be4e99c-fe5c-4d67-b349-19a1448dd130", "value": 100042, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448628, "uuid": "451f46bb-e40b-4155-8cce-3a4756e119d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c03e081c-1625-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772448681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448681, "uuid": "d2dc7de5-407b-441c-9992-c4ddf74db797", "comment": "Malware payload (Mirai)", "value": "c4aa76575728900a9c52c4c9d69534a6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448681, "uuid": "71ea7c16-967b-4e8b-990b-fca721bc8882", "comment": "Malware payload (Mirai)", "value": "dbdb84fd69542d3c45846c5283beb334958c66717e65d9a924b9c3840d8b875a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448681, "uuid": "cf132247-8676-4d76-9ed4-ac9a1ac586f5", "value": "T130E38536B7619E77D81ECE7305A985121C8CD98702D92B6BB2B4E51CEB6BC4F08D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448681, "uuid": "5498ca55-aa4b-428a-9040-03f664277119", "value": "3072:dgZc9h1jlnLA2PiXYeyCcnVNMVGuo9mrThPaLEnvPrNb:dd7lnLA2PiIeyZnVWDo9mrThPaLEnvP5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772448681, "uuid": "c0ef2052-9825-48ba-820c-a105374689f7", "value": 155476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448681, "uuid": "021d0da0-b881-4a66-80ec-ad3e5a3063f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c03fbd3b-1625-11f1-8b52-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772448681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448681, "uuid": "ad1d78b6-843e-4836-819f-a2d3302a7e85", "comment": "Malware payload (Gafgyt)", "value": "44d8d1601171f12363ef24d816b83012", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448681, "uuid": "92aee592-0f35-4211-aee7-90ab23247dff", "comment": "Malware payload (Gafgyt)", "value": "2938c6a12a81402c0b0640a5626dc00ad2e64ac5756fc3e1a2dd62682db87af7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448681, "uuid": "289e6a1a-fa7c-445b-a6ac-1e307f8e28f7", "value": "T1E5C3F831E8044B1BC2D223F6E75A469E3F351E9793E733115A3879B06FF27992E295", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448681, "uuid": "f2ef42b0-e1c2-4eec-b707-3fee672f2413", "value": "3072:6jVlyaL5JCrIpv04s1bttiEiTmP46aQyfPlfKsNb:yoCJCN4s1bHemP46aQyfPlfKsNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772448681, "uuid": "bebb91dc-4ed9-4061-8957-b0519f6413e5", "value": 129898, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448681, "uuid": "0f91c814-5ddc-42cc-af02-cbae9498d12a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e51990b3-1625-11f1-8b52-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772448743, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448743, "uuid": "7499a694-366b-47d4-8fc1-75cffc59766b", "comment": "Malware payload (Mirai)", "value": "987045adb4cd68d6c4a457939a2dc8a2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448743, "uuid": "7c76e6d3-9a0a-4ce2-87bb-e2b8e03cbc06", "comment": "Malware payload (Mirai)", "value": "f268f841d396d4e316176f681f24016dd4b51f4178372f53ee7b7a8703823edb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448743, "uuid": "6b83f079-6573-405b-80d7-ddb5bd4ccda2", "value": "T122E3A53E7A11AFBEE168827107F29F70CF9529D326A19381E26CF6185E7118D0C9EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448743, "uuid": "a245ca19-dddb-451f-b571-51dc7810f882", "value": "3072:JW6dm9tS1aRGQdK76t/zCaI5mrThPaLEnvPrNb:c6IG+LCLmrThPaLEnvPrNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772448743, "uuid": "cc6ff1b0-2889-49cd-b352-183eb8fa3d14", "value": 155428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448743, "uuid": "9cc94b0c-2046-4a2c-b10a-543f6f316464", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea2a2ce7-1629-11f1-87c8-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1772451314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772451314, "uuid": "11d8ec47-2d67-4496-b830-f1fcf1dc55b5", "comment": "Malware payload (RustyStealer)", "value": "a98c150c2f4a46f58503495b71137fb0", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772451314, "uuid": "17356192-6577-44a0-947c-833cb8a1e240", "comment": "Malware payload (RustyStealer)", "value": "20dc254b66b8616088c5122b29211d7102306484b550f75caee7ec9b2a02e71f", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772451314, "uuid": "6e66d1ea-2f5f-4b41-a88b-b594dfa4d875", "value": "T176B63319FD9359BAC593A97118AFB37AE7361A0E0607D9F7CF901DA0ED7B70209243", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772451314, "uuid": "c06ecf37-63f5-45e3-a5f3-1cc4e416c33f", "value": "4794687cac0beee76bb775325b829d22", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772451314, "uuid": "91d74594-0f7a-4327-b12f-bc7470aa6260", "value": "196608:k8AJgyeuPivvI4+7IDSJB9CL8PxLrIyrIuUVqmLqBILER1wpbmoP5:jzvvIpIDSJAg3IywtkA5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772451314, "uuid": "3065516c-856b-4a07-8afa-c40d25d4fcff", "value": 11268608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772451314, "uuid": "3bf5d5e7-40fd-4d91-bc06-2d5c715b7bff", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1772451909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772451909, "uuid": "ea66b5d3-c4f1-4fe2-923c-e7e56f2cbf30", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772451909, "uuid": "572147e8-fa7c-4d7c-a698-a7154e996fe4", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772451909, "uuid": "bc876cc1-1493-4911-b275-3619fd281e9f", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772451909, "uuid": "c8cf48b1-4779-46eb-87b0-1f6a5c1eb937", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772451909, "uuid": "0cdb7809-7ee4-4a50-ab3d-799b15212ffe", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9bf20f7-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772452509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452509, "uuid": "58222f59-f53d-4987-9c0e-c834e3f2bef2", "comment": "Malware payload (Mirai)", "value": "329727d432a75bb40bfd5bb60827a531", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452509, "uuid": "7141c431-12e0-4d82-94c5-dc07299c3060", "comment": "Malware payload (Mirai)", "value": "d1cabf8a5f0c29b3b076fc69c3d5d0cf8a6c512b7a4cc504731b82b396482b26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452509, "uuid": "934a427b-f929-407b-ae7b-f18c9a357ac1", "value": "T1FE739D76D0B86D98C5148A34A6AC99B88B17A40467A33FF2C6C1CF654047EFCF2147", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452509, "uuid": "6fe1709e-83f7-48e8-b556-ccd20f926ec1", "value": "1536:P/kM1DnBApwt1N0Haa+9mUESf9RwU9K4H00lRCi8R:PMMxnip4cxS1qkdH00D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772452509, "uuid": "59b16378-e132-49be-aa8e-aa0abd482b71", "value": 80596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452509, "uuid": "399a7327-9a63-42b6-a395-d4d29947bb7d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac594f51-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772452514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ab044f03-3995-4819-a74e-4211a26b7cca", "comment": "Malware payload (Mirai)", "value": "38eb6eeeaa3aa4fc475f90512158c17b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "3fab9068-8a28-4d23-8f4d-69c6310cb263", "comment": "Malware payload (Mirai)", "value": "ff5f8087afeadcf3125f99a2272494f85caf1d6905114a63f10d10794c484b2b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "27cf15fc-d4ab-4807-86f7-5642e1e921cf", "value": "T1BBA32A86BC819A11C6C51377FA2F108D330267ADF2DE7262CD151F647BCA81F0E6BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "3ff1fbac-db1b-4fe8-8323-028caf4c3f6e", "value": "1536:4Nnr0vpp/rFFSHs6h/d43AtnA78bPiqimKF/yqtBiJ70q5duUndOw7nizCIGiHmn:m0h9FEHztfNDbPf9waYq5MUnjghZmN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772452514, "uuid": "ed1cd436-2997-4fa8-bc2c-8a1772418eee", "value": 99632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "faf4502a-cf6b-4a78-b606-fca077174c66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac644f2c-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772452514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "8940b415-470e-4ee0-a1f6-1686b1b0b416", "comment": "Malware payload (Mirai)", "value": "14fd2ec6cfbec19b495f5d5bacc458ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "9e265e50-8d6a-4d73-bee6-191c637032c0", "comment": "Malware payload (Mirai)", "value": "782a54aa98a544d6559e75f038eae99b22d97e8175c53caf32d1863039a9fd6e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "6fd24572-407a-4bed-91d1-0c8f4661ac46", "value": "T138733AC9B5C3F8F4EC040A392177EF319E77E13BA129DD8BE7D96623A94134294122", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "6f3b856b-dcab-46a9-bdfb-8af419e9db63", "value": "1536:9QC/3umbutmUl9i1WIo27ozS9Lo/b2+gJymeMlitPWmM18HR5D4WRouZbqeqVr5j:9Qu3umbutmUl9lIlkeJoT2hJymeMlite", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772452514, "uuid": "26258f06-d4f8-4c49-8f6c-8e989fd47559", "value": 79600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "e5930718-63e6-4cf0-a59f-bf40c98820a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac64f098-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772452514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "cf37a025-4903-4e66-9eb0-98a1dce55bfa", "comment": "Malware payload (Mirai)", "value": "43e326c0e77c4d7784bd342093ab46b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "6b10aadc-a73f-49b0-969f-51528aa68d7d", "comment": "Malware payload (Mirai)", "value": "83c2f3782637a2d5661598b8da7622958b46524412b2a3a038a4e9de3b759d6d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "41251573-afe3-4ffc-a07f-f37c7985d9e6", "value": "T198932A781985F62CEAE65075F44329E6291206083FCDD2E369C344BAFF74B88B52DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "1431623a-6e8b-43ff-9d81-2b514969afd8", "value": "1536:v/TRXUWheYdS3OQ8QsFE3SlbBFtUBs2FCDcVBIVCCfy0K9K+5:a2eYdasFHBFosSCWu5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772452514, "uuid": "697a7e80-2ff1-456f-b4e8-20d9ee810273", "value": 91524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "7356b353-b044-41eb-bb6d-e30d01e62c15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac65705d-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772452514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "69acb820-fbde-460e-a149-22cb972492a0", "comment": "Malware payload (Mirai)", "value": "88d57ed7c3e6afb54a62f4df781134d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ed185ac9-ddc2-40ba-a02c-64ee6e98d51d", "comment": "Malware payload (Mirai)", "value": "3260978d10198fa256802aff7acf269911fa77e5aa237000228dba639c2ada91", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "a952a5cf-b484-4e6b-9a58-87cafc9820a5", "value": "T109832A02B9C085ECC089E138077F763AC425F1BD627AB2D73BD5BF1A2C19E501B1EA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "3c56ecb5-7bc9-4e8d-a527-ea0b4a35539e", "value": "1536:ATNuOfMLWePYeNnVTbBub63gbyLa47Yj0ZOYhMsQEDdiqYRKROELMgU:cHBePDNnlNub63gbyL/Y2hMs5DdiqdRh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772452514, "uuid": "2d6a2752-5e1a-4a58-9558-475b92084235", "value": 85248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "511d4950-4793-4130-aa58-b43b03a9bec1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac6e8040-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772452514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "3e8f2f66-4cd4-407e-9adc-8f829835646f", "comment": "Malware payload (Mirai)", "value": "48d686d70b7dfe81b5e63a61bd97cedd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "96d365fe-e9ed-45c3-8d7f-70bf462e9f9d", "comment": "Malware payload (Mirai)", "value": "4aa02b2b2e8b9027916724eb185a24a8b794c655b6069a1ccb9a79be50fc4899", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "163cf235-e041-45d1-9e8e-8237a3fe76f3", "value": "T134934A25687A2E17C8D4A23E11F78752F2F5330E24B0C66E7D760F8EFF15680A5462", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "e8ffa4b9-2159-4d7f-b3e3-6358ce93b2a9", "value": "1536:1KFdSaiZ2vPhnKORFS5P+lSMrhJ3HWwJnV6WO7HauvAe8:WNrZKl1NM9J32wJnV6WO7DvG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772452514, "uuid": "1370dd2d-e99c-4f2b-85eb-d0105e5cd031", "value": 92664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "8df56271-2d70-4abe-a5b6-9bc7bfd16edd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac77fae1-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772452514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "34a73256-cf23-496b-ae92-88d6b302f186", "comment": "Malware payload (Mirai)", "value": "89c2355d1c688099cc30822fac24c685", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "cf7b1478-f0c5-4a1d-a82b-d9e9ab8f16dc", "comment": "Malware payload (Mirai)", "value": "ab0ac7b424f2cd956939b6eda405a8f216a7df0a4849887f71130365100c3bc7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "3d9ac3f4-0694-42d1-af38-e3fad3b72828", "value": "T174930782BC81EA16C7D0137BFA6F108E331567D8E1DA3242DD251FA47BCA81F0D6B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "247b8c4d-481f-45a6-9b29-83ff8520913d", "value": "1536:tBywrO+bV2LkKsZCPgtAURwaxmXzsk0gDmvzdJq9xB8t46bZp67WJJwfw:tBg+bVqkAxJVQJgz84wZzJJ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772452514, "uuid": "66c67cc4-69fd-428e-b4e0-bff676e89d01", "value": 91132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "f2d3054d-bc3b-4b53-8420-c0cbf0250640", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac798d0d-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772452514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "e7c4c0ee-725d-46eb-b3b0-1ae25bfe54ce", "comment": "Malware payload (Mirai)", "value": "f2c258cbefcedf7f8b956a38ce202626", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "96b616d7-af3b-4a29-80bc-41abd67f9d4f", "comment": "Malware payload (Mirai)", "value": "10b06fff4832f9820e1600c530298001d28a794995ca77f9249132100aa84eb6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "94d0df8b-58cd-4945-b62d-c1e160fec19b", "value": "T1C8834C0173644F0BE8AA0AF5282F17E483FEED9021F4F5856A0FDB5A4235E37155AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "93bfecb6-d94a-47e2-b0b8-d67c277c7449", "value": "1536:7QHQd18Vez/S1f+39FAwFKtMzXIeoGXxAq:7TdUXReoq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772452514, "uuid": "3ddf2fbd-0e59-43dc-a9f4-b30d063e9d15", "value": 83040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "a1e59fa0-fb4d-41d5-b2aa-29452d63ba02", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac798e5e-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772452514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "28b05f66-eb4e-454e-ae2d-7acdcb8e209b", "comment": "Malware payload (Mirai)", "value": "f2d8c9b493b1e411edd398128191d7b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "84195b00-90be-4868-901c-165546c79dac", "comment": "Malware payload (Mirai)", "value": "9365e14013802f162a48894dc265819e74f58a9e873fd9d60dba99ef087444fd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "768de114-2d24-4451-97e8-67d6dccd9208", "value": "T1BC931A81F8C745F6C807493450A7F33FCE32E47A813196ADEF99AF36DA7760191122", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "6d70937d-3b40-4bdf-ad4f-24cf31c51b7f", "value": "1536:8qut0gR4/HEI2E1pMphR66rAm1XJmdfptWxix9FMWY+KDYV9Q4geDgn:8quugR4H2E1pMrR66rAmJQ0UxwfDe9Qn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772452514, "uuid": "2716ee81-ade5-411e-9ff6-828c6a4c0785", "value": 90896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "1890f5da-f015-40fc-b696-352315533e84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac7d99ee-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772452514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "0f643819-86e0-4e99-b981-5ad02bae2ea9", "comment": "Malware payload (Mirai)", "value": "39aea33b083d8a2103e609a1fe67d3b3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "3fa0ab08-ac50-4784-8584-5f16224c39d3", "comment": "Malware payload (Mirai)", "value": "8fc52603b2c6cea4ca67008eb84d07849098178dc13a9dc8f0954e8dd87b2365", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "96e5b415-cc1c-4c6a-b726-a81274b02e9d", "value": "T1FEB3910A7F600EF7EC9BDC374AAA1B4924DD241A25A87B75BD30D818F24B25F15E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "27d03cd3-cd40-41f6-bbba-5486ecb57625", "value": "1536:VTUAnPWQ+tbHc2cAd88LZAJb7zEUX1p70wZsaD2A2j6Z3ktkprSu:1UAnPWQ+tbHc2FhNw1pYdj6j7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772452514, "uuid": "48ba301c-b681-4850-a067-39e1fce58323", "value": 116916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "28956e48-cba0-433d-bf2f-2e0bb08ace08", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac7f84ff-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772452514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "dd6b22e3-44b0-401f-b65f-2ea125ed363c", "comment": "Malware payload (Mirai)", "value": "f75229beec6aa4b9279c65fafbfa409f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "9aa734e2-f454-43fc-8708-cfc58bd80b71", "comment": "Malware payload (Mirai)", "value": "cd1d9b6bc067694bbf179a2eb6a2736e9c8eab34e684746027f3cd960a106499", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "01d47db1-6ccd-426b-a2d3-7714995e0ae4", "value": "T1FBF35D86EA408A13C4C61777FAAF014D3322E759E3DB73068D185FB43F86A5E4E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "0531c518-988b-4bb7-8370-7c4e9cb66000", "value": "3072:3PFsu+bVZFpfnHpKhjiYq5YYujSrwGy/tBF1EufX6OxM/9a8cdAr:f2u+bVZ/nHwMgSrwGy/HFxfKQM/9aldQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772452514, "uuid": "24e71f98-cf37-4c08-b423-17a6be508545", "value": 163542, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "38d05695-4d9c-4bca-9e1e-b63ce6b115db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac86347b-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772452514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ecaebd22-635d-48c4-9d5c-e3cba1180ed3", "comment": "Malware payload (Mirai)", "value": "33c68055f29dd01d809ad3ec6fbc3ff6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "2cfe343b-fdab-442d-82cc-d1b9b1ca43ca", "comment": "Malware payload (Mirai)", "value": "42a203baf3b3b53c68a444adf3b7c6750b473e8918e961f00619d0f2c7d6568f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "d3719366-488b-489d-b9cc-acda75d23c3f", "value": "T196834C9AB4019F7CF98BE9F940120E0DF93163145B530F27A76BFDA33C620A5DE429", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "a7adfc11-4068-4df8-995a-6c52f4413f45", "value": "1536:sgMdj6jOe3FOcbmsf1zMXEkhTOuGOpWnA8tdHh98dPn:y0Oc6sfZaESTbFkxdB8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772452514, "uuid": "7b11f870-0d4f-44d5-9156-7358ff80b3c6", "value": 83864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "d0733ea6-b589-4095-870a-b3c61d062e5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac87a091-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772452514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "661e7dfb-77d9-4797-8498-10eb4a139ddb", "comment": "Malware payload (Mirai)", "value": "2b145376cea0409dd76c322c02c4900e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "c6ac8040-ef3a-41dd-a39a-5034db5776e8", "comment": "Malware payload (Mirai)", "value": "a0697f7a921fc61fca27c386b5425c669fdd4ecedbd801e33adc14b4f19eceac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "4a070941-0d53-4fe9-9528-9ec3ecab2590", "value": "T119835B46EAD7F9F0CD4609B4106BFB31D53668323121DFF7EBC8B967A9A1601A0532", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "830602d5-bf4c-4ee0-b763-9ee00ec37f56", "value": "1536:2PfGfiOz1mKjfs2ajfYsyGsxuWIF9sdOWvd7/UL4iSbmNgIN:We7saL4sxwOCkpbf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772452514, "uuid": "209018d9-4c7e-401e-a83b-d1669dd21805", "value": 86616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "c864cbdb-fe21-4539-bc5d-dee26d09ea97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac89b7ef-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772452514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "aa991939-22ae-4048-9c8e-a340f465e24b", "comment": "Malware payload (Mirai)", "value": "4522196e77ad987e17e05f150c32597c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "bfb2843c-b844-4b04-a214-28343eb64a25", "comment": "Malware payload (Mirai)", "value": "959b70affe83d501ce0e054d080ac35035825ce1aa01ee3342ac9546bfb05b68", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "6ca791e0-f997-4ff0-b733-d240f532d93a", "value": "T17B831982BC41A629C7D01377EAAF508E3311B7DDD1DA3242DC254FA47ACA91F0D67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "b5b2781b-8efc-4165-bcff-56f1da052857", "value": "1536:yPjwUUaianjKST+TegqUkyKNXECsvkUEwYCB8t46zG1nef:yPUUUazKeCIyELy84MG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772452514, "uuid": "340f1f75-a20c-4bae-b557-c85fe85ad458", "value": 81564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "3622a18c-23f9-4bf8-a9f3-6c4ab4cdfa33", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac9fd92f-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772452514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ac21e93a-3f26-4947-acad-95a987d1ea12", "comment": "Malware payload (Mirai)", "value": "2be7df94c9b9cfc151e7c93444dcbf4d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "90f6cf9b-6a14-4296-a2b7-a2b85655129b", "comment": "Malware payload (Mirai)", "value": "a114f2d263f633bfc4e4cd531bdad05f903354b108af3b63aaadbd5506feed41", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "0d4a088f-3e21-4811-a0a4-23ac3e376ddf", "value": "T190B3950E6E319F7DFBAC823957B78B219208379626E1D584D09CED025E7038E741FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "97cf013c-b841-45c5-93c9-6ae0fae3ae68", "value": "3072:er3x+xpNAsh+JySL/BjtfLdkPlx8eNElwR:ex+xpCshOyS/LdkPlx8/wR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772452514, "uuid": "5fc8d08d-57ff-460d-8de1-0f10ca5ba7fb", "value": 112980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452514, "uuid": "0e8bd75a-e922-4f50-9d97-3de376b9db10", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9bdf2fc-162f-11f1-87c8-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1772453046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772453046, "uuid": "9c1a0065-4cec-49c3-a7f3-6367dbc36188", "comment": "Malware payload (AgentTesla)", "value": "f9d2151992f2dfced5669d243bcb13fb", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772453046, "uuid": "985ff2ff-e0c9-48b8-a12f-c70e241cbef7", "comment": "Malware payload (AgentTesla)", "value": "99c6f209e4e4adf3502472112f7172ede1a5dbf829c59d593449605ca2698d49", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772453046, "uuid": "f71ab53b-a5b8-41e6-ae0c-79de71cd4792", "value": "T12B13C738CB91CE484FBB55CE2C6E9961542F4AE75A27522CB1ED20D18B14FDE241BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772453046, "uuid": "f93a7bd1-cdb0-4a08-8d0e-8bc670df0bbd", "value": "192:yXRucRuJXFXxCXRXTX+XtXsX/Ru9XUXQBYPeg1TUU:Au0u8utBieg1T/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772453046, "uuid": "481b1b8c-5990-4921-b15c-08869267da7b", "value": 43532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772453046, "uuid": "abac23d3-66e1-4abe-971b-dfffe5cbebc7", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb47ba8d-162f-11f1-87c8-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1772453049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772453049, "uuid": "2d8c65da-9a38-4a4a-8afb-49664f697ae9", "comment": "Malware payload (AgentTesla)", "value": "5c40e273901403756f3ebff955ca5b0c", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772453049, "uuid": "8433db5a-e17f-4a31-9862-7951d7fa672a", "comment": "Malware payload (AgentTesla)", "value": "3dd33674755654a3dc5e182bc04bd1d4bc96cdeec6c1a201819b113e98922b58", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772453049, "uuid": "5d55e6d1-519f-40b9-8c73-d58214496bff", "value": "T1A2163B44FD48B6A92F23CE363BB471D186C2645B7D4A8582F02B9EB1BF63185ED20D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772453049, "uuid": "98eb2047-889d-42fe-a5c4-629abd2921b7", "value": "98304:7rbCiR9BNflz0xIpiqrQuaDEWhUW3dIwTPojeycAavX9RzsqAnA2fB5EbsiJnpkQ:7n9RPIxba9aDEWhUW32wToS2avgqr2p8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772453049, "uuid": "808770ea-5742-483b-8dcd-052be0bc4fd8", "value": 4279762, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772453049, "uuid": "af033082-1130-4356-9680-cb4165d06bd8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb92870f-162f-11f1-87c8-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1772453049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772453049, "uuid": "ef8dca14-7061-49c0-aa56-79be74dc6ffd", "comment": "Malware payload (AgentTesla)", "value": "e450439d2cfd366545c0115fdc4ac9ee", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772453049, "uuid": "27ded4f5-b52e-4278-b7f4-e6e17e10c981", "comment": "Malware payload (AgentTesla)", "value": "e242c6184c8ec3f11073e638f3bc192fe9c9a87acd0045594633c839cb723a9d", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772453049, "uuid": "443a0c32-abba-4313-8c4c-4388b430ac7e", "value": "T17B164B48ED4497842F23CF357B6071D14392786B7D4A9A82E02BDDB2BFB3199AD25D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772453049, "uuid": "2b6b03b0-d9ba-4a7c-947e-3e75ca066ccc", "value": "98304:9n+1WwXNFadmBfRg2eUriuy42bw2gAwxINUl4AaiBTQpn8JkZKp2W8ETkf+Elh+e:41Z9FsgRgzxDE2gAuqBiBkpn8JkZSb8b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772453049, "uuid": "babb5202-e727-4e39-9c1b-ea25d43e3007", "value": 4279762, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772453049, "uuid": "018af7a5-0f17-41fb-993f-a9e4a8b2894d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ae26498-1633-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772454551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772454551, "uuid": "9ab22480-f293-4418-937f-ce1eaa670d51", "comment": "Malware payload (Mirai)", "value": "8e81641bd3dda08846a39f40a56bef94", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772454551, "uuid": "71058e39-fb18-4f42-b39a-245207792cd9", "comment": "Malware payload (Mirai)", "value": "1d2aca751901d2958422871f47d7c2322c33345eaa29b088f0cefabae5b11d8a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772454551, "uuid": "479ffaea-e742-486c-a11f-a7b6529d1f2f", "value": "T1B7362850FECB04F6D9031E3144ABA22F53315D098B24EBD7EA547F2AF93B69219362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772454551, "uuid": "6db04c91-ac33-4723-8ded-c3546d2efbf2", "value": "49152:S4gA/zY1+GA48fB4DRpEz1a5caBGQ9Qymj4QIimb:DgArYEGzlWab", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772454551, "uuid": "e7daf3af-15af-45a0-8e71-2dee49911ecb", "value": 4894872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772454551, "uuid": "20f78f60-767b-4213-af06-6ec7561614a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b740aa72-163c-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772458545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458545, "uuid": "d9bb7bdb-200f-408a-a9d3-a01744ee58e6", "comment": "Malware payload (Mirai)", "value": "bae6e2315f3d5f04f28f11a26120c6bc", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458545, "uuid": "16efff14-cf17-44f7-9c36-4fce57643998", "comment": "Malware payload (Mirai)", "value": "d65c948539aaafaf5c33136b003352b38a90412f7a114554b7a71d661a20dbdc", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458545, "uuid": "9b45065a-2ead-4ae0-a3c5-efb0cc82bd6e", "value": "T14C834B037A8194FCC499C17447BFB13AF862B07E123CB2AA67C4FE17AD88E105E5D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458545, "uuid": "96b551d9-ca0f-4297-86fc-0b29840199cb", "value": "1536:BThAUTObq4HdqUo2NzB4jKiRke2oQOya5TQBgqQ1qu18v6Svb435h9vgduxdwbZc:phAUabh9qr2N6jKiXtQhOTQB81r18v6B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772458545, "uuid": "7c09be3d-73a8-4d44-9999-f8d5c589db5d", "value": 87872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458545, "uuid": "1063871e-faa5-47cd-a477-1e6a71249212", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd34a682-163c-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772458609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458609, "uuid": "f8f713a0-f90a-42da-a9d6-18e3d4308b23", "comment": "Malware payload (Mirai)", "value": "76b71b835cff151d9d401cd7a7bac9e3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458609, "uuid": "049e7570-748b-4f8e-9af7-9b63c7396dc8", "comment": "Malware payload (Mirai)", "value": "34c852e4647c4fec62922a5215fd69720daf21d195592846ddef37cab04d74c6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458609, "uuid": "d62fbea1-e990-4dd5-a338-f3fc6d14ae4c", "value": "T190934B41BD825A12C6C513B7FB6E028D372623E8D2FE72079D116F11B7CA92B0D7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458609, "uuid": "a15d11a6-d016-4d72-ba39-dbbe336815d9", "value": "1536:J6yUnFDKbEphm3oHEKt5h0VUYLGcunc9fJGkkiv218UK0B7WZZZMvoowbZne:J6yUnFwfK10VHLSnSJJki+1EZELwbZne", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772458609, "uuid": "adf4a445-db07-4c66-9804-1dbf6eedeba5", "value": 92724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458609, "uuid": "8364509a-1c6d-4634-8761-8ba32811679a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0532518d-163d-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772458676, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458676, "uuid": "46477cb9-6927-407d-bfce-b04c6fbc6cc0", "comment": "Malware payload", "value": "9df0ab19ad1ec7827f5adf2e6bc15a91", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458676, "uuid": "a50f8ce8-efbe-471e-8c5b-d585fb9803ea", "comment": "Malware payload", "value": "dec73e022ab8758b7251f9af4cc7af2c1987aa9ff1ce3491ce8ad21bf20c4277", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458676, "uuid": "08cc1d06-5e11-4695-9fba-f9a103a882ad", "value": "T144B633307D8509B1D9B50A3AA4D4EF9CDB3235B26714345F7EC82F61EAA418963F90", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458676, "uuid": "fafa4aa3-4f24-416f-b181-bcff0002b3e9", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458676, "uuid": "5a5c20a2-d100-452e-848a-2656f4475341", "value": "196608:+v51VoskkfF0vZ0uih2B1lLivj/FiH0gyGM6sN2Z8OJZyQdnXAg/YbaRRaBPu:YCskkfKZQS1IvhiUgy16pY0wg/YWPku", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772458676, "uuid": "893b2446-b159-4b7a-a063-8f323f685133", "value": 11365888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458676, "uuid": "a94589c3-d263-4a61-a9df-aaed656d23f8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80724769-13b1-11f1-8369-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1772458688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458688, "uuid": "dc834680-17df-4913-b160-472a9fe8b045", "comment": "Malware payload (AsyncRAT)", "value": "ab8d667009819e40ed8076df4daca3f3", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "pw-123", "colour": "#ec515f", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458688, "uuid": "cb311ec2-22d5-4f3b-b30e-c8f50c1a8699", "comment": "Malware payload (AsyncRAT)", "value": "55bbb15df2cc4bf59420fd6df7e9164e11c4ab8c8604a3fe000f0ac6c4b25836", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "pw-123", "colour": "#ec515f", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458688, "uuid": "bd402690-2306-4d82-8e00-879c9f209753", "value": "T14BB423C8D286D41669D115F660B5BDD06CB54EF83C661A37AB2D0015FFE4D2B3A1E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458688, "uuid": "b67bf073-bfe4-4fde-8158-0c9506b70734", "value": "12288:Y+sC5bOXw14yBP1N8M0XWV6Amhg+Lai+vo6CohCu:TTyXdSIM0XWV6AmhgIai+hVIu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772458688, "uuid": "58fd4282-700b-4a14-9705-f54ee96255d1", "value": 522234, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458688, "uuid": "ef1a3fe1-a52a-471d-b140-b67e51d4c336", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "803ec033-13b1-11f1-8369-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1772458688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458688, "uuid": "3b600ee9-0078-47c2-b19e-c2613ce07c68", "comment": "Malware payload (AgentTesla)", "value": "d6452b72a4eb73ac55fab6e42f3a33df", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "pw-123", "colour": "#ec515f", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458688, "uuid": "341a9745-56d0-4895-a693-30de2866d0c2", "comment": "Malware payload (AgentTesla)", "value": "5de1eb4c8c7edfef435d721a4173597b928c4cb9725a6ac20c5da7d086a333ce", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "pw-123", "colour": "#ec515f", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458688, "uuid": "69637137-304d-4c1e-be7c-1ccde07481a9", "value": "T10B412A2C4294B3F1D4620BB5E986D9C3FF7549B4242B862694966412025B2BE12F8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458688, "uuid": "ceee8387-85c8-40eb-a371-d1ea181da326", "value": "48:91qB2YB7bB4/sEgzyFIUfILFfeKsM6J7cys75/k+Q:+B2YpbB4ED6iyyxQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772458688, "uuid": "9da1bf3e-6897-4651-9458-4a234a6ba2ff", "value": 1998, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458688, "uuid": "b2cd3fcd-ecad-4504-858e-60d860339af1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e19e8418-163e-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772459475, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459475, "uuid": "758c37ea-13bc-43a9-ab2f-4db888d70769", "comment": "Malware payload", "value": "0c3471aaefd97cfe113d4edc061e5c9f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459475, "uuid": "a92ad890-31ed-4c2c-bcf0-9cb60a352282", "comment": "Malware payload", "value": "95e62381134354626424fb9878a448efa5f1425e29e2343f3a82dfbb0f571de1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459475, "uuid": "dbd1fdaa-3ad0-4117-9750-e5084b3daa21", "value": "T1B38308327588582A210B428FD263336C70EFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459475, "uuid": "98e409aa-ea27-4659-820a-c3a9c83c85a0", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnpWaAVN/:XEKltp9t2SX/yr2pbpWxVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772459475, "uuid": "bf8a2226-d3b6-47dd-89e4-4370d5e2fd31", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459475, "uuid": "e3fb62e6-f17c-452a-8439-81dde97940f9", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89a3cbed-163f-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772459757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459757, "uuid": "da14233d-dd9f-4883-a6ba-480883811118", "comment": "Malware payload (Mirai)", "value": "bdac377f0f8c4c9f7e9cde47730363a4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459757, "uuid": "98efd3d7-61fc-4665-ad98-229b13ec6480", "comment": "Malware payload (Mirai)", "value": "bdb39d16543c43c88c4a281f58e53d4e26adbc0c148550cfc04f10db9035e30b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459757, "uuid": "031fbcde-f370-47a9-af29-3ee45e5dfe9b", "value": "T1B8834A80FA8B84F5D94B493040BBF33FFB71E5794070D66DDF49AE26DD23601A2162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459757, "uuid": "4e76e703-e0cb-47c4-8ea3-2dca85b077b5", "value": "1536:RgAHn2H5PCu2jnMGNRi0FP6kb9RT/m3huCFrP+mwW0CmKU7cdwmY6SWzjx2wbZnL:RgAHm5PCu2TNU0FikbjodzmKUJmlSsEa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772459757, "uuid": "c0f9a95b-e924-4020-892f-2af71672d837", "value": 83824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459757, "uuid": "26a3679a-f075-4c8d-b5df-4654ebd7262c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a25a66b7-163f-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772459798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459798, "uuid": "0a1ebebc-f3e3-4204-9134-56ebdbd94baa", "comment": "Malware payload (Mirai)", "value": "933ac056137c1a4faf943ec7522f7b62", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459798, "uuid": "05cfbce1-0bd7-46ce-a08c-ca4633a441ea", "comment": "Malware payload (Mirai)", "value": "d210d44e14f8910ffa11c314640bee3f4b5b4cf257386a8afc9aa44270b343ee", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459798, "uuid": "d98d59a6-c3c7-47b9-b16a-5fb91fd093ad", "value": "T1B7936D22BA3A1D27C4C4A57B62F34765F2F5078B25BC8A1E3D620E4EEF2465032572", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459798, "uuid": "a3d696a1-3122-406a-b557-3b2e7112e191", "value": "1536:DqltwuSGISjQGZTXFkxPec6ClUqXltVioM53RYYScTr70cgtgZrwbZnt6:my4LFkpec5NXljio8hRScvrFwbZnt6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772459798, "uuid": "e62daeb8-527b-468d-91ae-31edd4d2cc88", "value": 95288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459798, "uuid": "d0e70b14-abf3-4514-8b7a-6b65505605c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e99fc6e5-163f-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772459918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459918, "uuid": "216718e7-4898-4cb8-99c8-f57dfd8e4277", "comment": "Malware payload (Mirai)", "value": "77213434a8a7b42200ffa93fc65ea428", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459918, "uuid": "16317703-40ea-4825-91ff-a6386777087c", "comment": "Malware payload (Mirai)", "value": "bb1c4dc48cb125d18a174c04da311e1c7b119df240fd46aa96f8503219a472e8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459918, "uuid": "49c624d2-1656-45ed-9ed3-e9125803a8aa", "value": "T164933A41BD815A22C6C813B7FB6E028D372663A8D2FE72179E116F21B3C692B0D775", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459918, "uuid": "04d69f7e-516c-4700-8099-2726a5429989", "value": "1536:Hy7xBVhGuHRG5IN0QHCJjgrJhiTYGBo3pFPXW8ptDgXYYqEdM0JgwbZne:Hy7xBVhGXdtJMJh2Yb7fW80kEq5wbZne", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772459918, "uuid": "d9cd1b30-292d-41a9-bb29-7c3a599b1851", "value": 89212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459918, "uuid": "4b9ed777-9681-4fba-aeb8-6c6a002dc73a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07d43357-1640-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772459969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459969, "uuid": "6624fa0b-d394-4fcb-8621-03621adeeb65", "comment": "Malware payload (Mirai)", "value": "2609eacf892bf3f52f3146a051a8bc4c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459969, "uuid": "0969cc88-312f-4d2b-b831-fcd4627b3e04", "comment": "Malware payload (Mirai)", "value": "6ca87d4db53cc90af5c1039252ce35366ec411ea8d2a95db4f47d531dff6b1ac", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459969, "uuid": "98fab11d-831b-465e-9886-cd4816d95cdb", "value": "T1C6831B02770C0E43D1960EF4263F57E0E3EAA9D121F8FA49650AEA46C6B5E33554BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459969, "uuid": "9e948fe6-4a2a-484e-aabf-436233756a64", "value": "1536:Yr6Dna9UdQXw695GWaPC6wqFz/N7j1kw7Oj1nu15JrV20FLSVowbZnyD:kGWGWX5qhhKw7OFuTJrNpwbZnyD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772459969, "uuid": "3e0f56a1-afd8-44ef-9ebb-a60b594b3216", "value": 87468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459969, "uuid": "9f5eaf73-18bc-416c-ae10-acf8f56e96a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ea7c8d1-1640-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772459980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459980, "uuid": "c150af58-07cd-4c79-a8e0-b4af6f8234f1", "comment": "Malware payload (Mirai)", "value": "8c53f59e2dd51088971e4e408e539550", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459980, "uuid": "d9e7213b-bdab-441d-b204-b3bbc3c653b9", "comment": "Malware payload (Mirai)", "value": "30383ecc25a65e2149246e4352e26a2ce1278a99dacb4fe7f7445280f87a61a8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459980, "uuid": "81b8a292-465f-464b-83a3-e3493273c4ce", "value": "T1DE363A53ECA545E9C0AED23586629263BA717C484F3523D32F60F7782F76BD0AAB53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459980, "uuid": "31991f87-2351-4f6d-a86d-eefdad7fad4c", "value": "49152:V1aTMI0iwpQeU0yoLkOaaysXSRW3y+owiQT5EoO4TPBsP2RGjXbBd:KKpPyrsXCWdosEok245d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772459980, "uuid": "19364e2b-45f6-4276-836f-50693a8fe564", "value": 5066904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459980, "uuid": "f880b1a2-6cd8-4f33-9f5b-2b0d61d20249", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14989fd2-1640-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772459990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459990, "uuid": "c7adce20-9211-476f-b163-5a1ef767ddd6", "comment": "Malware payload (Mirai)", "value": "7af0620d2d4df95d7cd5b838d8170de5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459990, "uuid": "09343ea3-a50a-4e31-80a8-ea30bc41ac00", "comment": "Malware payload (Mirai)", "value": "04bef955bdc88a55ee26db5b88f11cb9dd5f8da2d3a01df0e588459414bccc66", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459990, "uuid": "d243ba7f-0a4d-4bc1-b0d0-651011820a2a", "value": "T1FDF33906B30C4947D2632EB03E3FABD193EFBAC129A4B645391E9B8D91B1D321545E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459990, "uuid": "32fca085-f096-4742-be6f-7237ecce9dca", "value": "1536:lp3QMu8Y5nK3eXxFTYf1XIplNwxc4nJFH/aO+zlANKnBU6ApGvAfKCHmV+KzSINF:f3ZuLVuwKoNwxRHSO5NeBOvfO/g8agEm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772459990, "uuid": "6475ba1a-2aa3-42e5-9894-ba3ed50c6500", "value": 160540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459990, "uuid": "5e596539-f41f-427a-9238-7af897db77fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3b74251-1640-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772460257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460257, "uuid": "900d877f-b553-4182-8f51-5e0852a90459", "comment": "Malware payload (Mirai)", "value": "a19482015696b321dd58fa55bfca6cf5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460257, "uuid": "9b2243b7-4d4d-4523-9432-6973971309b7", "comment": "Malware payload (Mirai)", "value": "ed04e19c647cc9e1f292311ad5fdcb4b3ac3a7681b58e408c0e532749e29652d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460257, "uuid": "01f485c6-47c3-448a-9565-ae070cb0f69c", "value": "T178B3A50E7E218FBCF7A8C23047F75A21B69D33D526E1C585E19CE6015EA034E645FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460257, "uuid": "c27b501c-43f6-4e72-bca2-cfb9c00cabaa", "value": "3072:OHJvgEXn8yTjNpeEeyovwUV05DxwbZnoW:04EX8yTjNpeEbJWExwRoW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772460257, "uuid": "016fb027-8789-499b-bfec-3dba94603b25", "value": 117680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460257, "uuid": "d97e0cca-c2fb-4417-a19f-ade1ecb7d242", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ac69e51-1641-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772460483, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460483, "uuid": "2b503a46-fdb8-47f6-aed5-0ea1d62d3704", "comment": "Malware payload (Mirai)", "value": "a2130e5cce9e7abe99ca2e1582a11e77", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460483, "uuid": "2d984757-c213-42f5-86e4-2a8ce4ed867a", "comment": "Malware payload (Mirai)", "value": "574574c428b1eb8f9b9fa10cce838b678df69c3341b12f89b1352a163425a6ad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460483, "uuid": "6cacc294-f1fc-4795-9c24-240f1a0c9cc0", "value": "T1EF24C709BB510FBBD8ABCE3706E90B0129CC655726A43B353674D72CF54A94B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460483, "uuid": "e88f1c69-c0c7-4c2d-92d3-51134a4e4738", "value": "3072:V/7c68aHFw1lEJ/k/9357rM0DPx3yB1ghhZ8r2:V/7c68a21lE0p7VLRs1UhC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772460483, "uuid": "63e2333a-4a74-48fe-8380-802fc3451dde", "value": 210040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460483, "uuid": "75a8d5f3-51b4-4b41-9269-bb335be5d74d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49d52680-1641-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772460509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460509, "uuid": "f6c0a763-59cb-4c91-97aa-77eadd722cf2", "comment": "Malware payload", "value": "8b5c13c208451345a7e26f7b312231a0", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460509, "uuid": "45494f0d-af23-4426-a277-6869a9b45a9b", "comment": "Malware payload", "value": "3016d6a89c7e72cb95de6beca1904bbd72e7ec3faa3067a310cacfc21866a054", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460509, "uuid": "f4ddf616-540e-4e28-9283-4dd2451f4247", "value": "T153F72356E2F900E8D5BBC0B8C6575517EBB1345913309BEF66A48A692F33BE06E3D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460509, "uuid": "1fd850b6-2d4f-4e8b-b1aa-3e88968615ab", "value": "70d2e884fa127843c5bcbb53da86b6c8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460509, "uuid": "2a165f09-ee7e-4d8b-b5c2-b4d6931fcd51", "value": "1572864:VRWJo/Q6fhXUqH23Vxczp/FwWcMzFBbLCpRIv0A:VKohuRlSzptbcMTbLCpRA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772460509, "uuid": "c479489f-0f3a-46fd-b6d7-cbfb2ab69a6b", "value": 73481840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460509, "uuid": "841a2383-0a3c-44c6-8784-704e81375987", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62a7c68e-1641-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772460550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460550, "uuid": "de59a219-1d6f-447c-a74c-33d2900e0cdc", "comment": "Malware payload (Mirai)", "value": "3848495dd954ec5db9376f7f00c4db63", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460550, "uuid": "4437d6a4-5ec1-48ab-a1b3-9f89bba40bff", "comment": "Malware payload (Mirai)", "value": "9add9e647a926c68bb82c2e922c206d788702a706f4cfb63651541bff8ed3e4c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460550, "uuid": "b336c53e-23f0-4b7a-b8d3-79e7d8e3adc4", "value": "T13A46D914AC842BE7C06C8F7490EACE5662745D144AF14A3626A4FFACBC762787F47C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460550, "uuid": "ac48e371-661c-4043-b7fa-300ec20f65cf", "value": "24576:riFzXCcnUFNLQqAe+sTb1YFo4sU1jknGcf7/RjNHkxjMJcL7I4p0fX21k/RjNHk3:It+Ms17oyejgKQf8t6D4Z6zKLAzZBO2m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772460550, "uuid": "ab70d845-0110-481a-84e7-905930680fab", "value": 5636279, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460550, "uuid": "6d8fc8fe-0840-4a92-9076-2c9186e1f31d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76896dc9-1641-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772460584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460584, "uuid": "e954a799-7c88-4652-ab9c-be55e5986dbe", "comment": "Malware payload (Mirai)", "value": "bba8e9b1635fef7a2ed2fdb901971219", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460584, "uuid": "6a8b48f9-3dba-4b84-bd1b-66a95cd24782", "comment": "Malware payload (Mirai)", "value": "b7e0c98637f616cc01804b34ab1d8cdc004f7356400e4e613c4cbc609694fc4d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460584, "uuid": "b5c05a4a-f157-473a-ab68-025c3ff62616", "value": "T13AF30845FC518F12C6D612BBFF5E828D3B2627A8D2EE3103B9255F2C378695B0E365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460584, "uuid": "14a31459-20e7-4f6d-8930-ca4b1e140ab1", "value": "1536:rbCZGrqjPwUUUYE4kJ0X+oTQgcBsAial4VxLAJTe79GUlMboOYPL3PjojvlAATw0:rbaGTkE+6QdBsq4z6y79GUyQM6U18Tq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772460584, "uuid": "f640d644-2597-42ed-bf07-4648bdcf923b", "value": 158336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460584, "uuid": "029ff5af-666e-4157-b4a2-9fc59cfacf32", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "900b5408-1641-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772460627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460627, "uuid": "c6e8de3e-fec1-4ed3-9bfe-527ec0f03934", "comment": "Malware payload (Mirai)", "value": "d27cc80537344bcaf836a50696cfd792", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460627, "uuid": "6063bc60-e476-4ec5-8e71-fa3bff794331", "comment": "Malware payload (Mirai)", "value": "c62c0cb5e0bb8d3cd96dbc2a2a6f42ec9fd2d4fe369006a2416d3185d893e34a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460627, "uuid": "2cb0defa-d00c-4f6d-8378-1bd4713b2733", "value": "T132C38C87BB4B1860C86107F11BDB5B9D3AA331118E2BD8F76D0E757B983D5CA090A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460627, "uuid": "dfe92710-257d-4254-bc3c-fef74c828210", "value": "1536:QDmqw4271QOWLmnqLYLkLeDwgx193lC+5L6g+BMx6sRg/GwbZnO/LWb:Ew4271+JLYIiPn93bL6g+BeguwbZnOq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772460627, "uuid": "07700cc9-0521-4eb6-9340-142d75ac7d09", "value": 124192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460627, "uuid": "df1592b0-db84-4cf9-89f3-b28ab913e6c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07eefe1a-1642-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772460828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460828, "uuid": "d9d60b23-8cab-4910-9181-a2bc78a26a24", "comment": "Malware payload (Mirai)", "value": "15f9186f059fc3674482613fe83914fa", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460828, "uuid": "cde2a791-60a4-40d4-8af6-a5b919c9b5fa", "comment": "Malware payload (Mirai)", "value": "98bdd7caa7c6e010b0f6df0ceb2c470f8e64cd3e69fb5ccfec262cf396f055c9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460828, "uuid": "f3c1dbf9-d478-48b1-8210-f0b14114c733", "value": "T12D831B02B70C0D43C1A65AF02A3F17D1F3EE99D121F4FA88255EAB46D175E33518AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460828, "uuid": "70eb7a84-6981-4536-bd45-2c3cd5983d56", "value": "1536:hwU2ssc7Hzx1xm7DrIMz6I+Cus75xPtVXd4C7JGSSuJIZ/6+Um4qwbZny/:+Unxu+Ioupt4C7ASNJFOwbZny/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772460828, "uuid": "4e860efc-845d-4cb8-9274-d33d712a2046", "value": 87468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460828, "uuid": "5ef1d877-9d9f-4de3-b92b-91e07345f6cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "323a0702-1643-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772461328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772461328, "uuid": "e461be8d-0485-4c4d-ba40-4395402ce1a6", "comment": "Malware payload (Mirai)", "value": "ebac9a1fd1b90b1bb9f1229f16e4f7f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772461328, "uuid": "efccc7d6-b3aa-4ffc-afcd-5125b48eda20", "comment": "Malware payload (Mirai)", "value": "cafeae9757bc27fdaba436e2d1a72d16257c917cccd406bd9391a9cd3cd585f3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772461328, "uuid": "02921615-1ba2-4c21-9c78-be02db9e011b", "value": "T1ECF30956F881CB11D5C111BAFE1E518E37232B78E2DE7212BD246F7C778A86B0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772461328, "uuid": "02471a8f-3a36-411a-af00-25e4de4dff8d", "value": "3072:+3QFBpUqkrBBMXz3hMnmakG5Uf67MTD5cWTHCBgXY3g8sd8:bFjBm7MXDhMmaXU64D5cS4gI3kd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772461328, "uuid": "89a2d68a-df48-425d-b0c1-a03412aec883", "value": 169852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772461328, "uuid": "8b2b2bf2-f0de-41b8-86c4-0a02c62eb61f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e9d5257-1643-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772461349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772461349, "uuid": "bc0c8962-8c60-4780-a8a8-3ec3def781f4", "comment": "Malware payload (Mirai)", "value": "90a50a878bc847aeef5d27252889491f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772461349, "uuid": "3d04b713-cc9c-4127-85d9-b82ebfde93c1", "comment": "Malware payload (Mirai)", "value": "358c3a8620fe090f9152532120a363d3ad30ba587ccc3ea1a04dcbd2272e7b87", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772461349, "uuid": "96dd3a62-3d48-4386-9f54-8890d2739c5e", "value": "T1D0933A9AF800DD7DF80BDB7B44A3090AB670B3514A934B3A6357BD53FC361A54863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772461349, "uuid": "b1bfcef4-ed84-4434-859f-c8579660f0ac", "value": "1536:/WPz1KCqpu2+ETKcxYcLwpfhVbiASNlR8Y7I3WAJ9L56YQNwohuoxs4tr/BeTBng:uA+MbCcQmASNlRQLgYMBs4trJeTBnW3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772461349, "uuid": "c5c4eac6-ca1b-4df5-bac4-68a82c62e61c", "value": 97388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772461349, "uuid": "47d90ba9-3207-41cb-86e1-a623beef2bb3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8fbd9805-1643-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772461485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772461485, "uuid": "019072ae-46bc-46cd-828c-d3bcb1cca209", "comment": "Malware payload (Mirai)", "value": "1ad4c6db88c993644e781a1cd6305e21", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772461485, "uuid": "515f8938-0e88-4a3c-90dd-7c751d308a67", "comment": "Malware payload (Mirai)", "value": "4d33b002f920964c2b3c8e3ee484a49d0f7b00d1ca5783256fe36916c3c70f69", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772461485, "uuid": "19ae9b1b-a006-4447-aa1a-761e1ee08447", "value": "T149C3B509BF610EF7E86FCD3746E91B0635CC591A21A87B397A34D818F64B54B0AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772461485, "uuid": "8e8431c6-9e29-43a7-be28-aeed60321bfc", "value": "3072:LJy8FqhSLqHqGeH6ydO/oMD2RkNwbZng:LJy8FqhGH6yU/oKwRg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772461485, "uuid": "7d2b20ef-550d-4462-882e-0d936398ec62", "value": 118304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772461485, "uuid": "d1396e8a-6a81-401c-bf1a-6e0a190eb54c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d0f6281-1644-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772461722, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772461722, "uuid": "4a47e564-0895-4daf-8335-704e6c81daad", "comment": "Malware payload (Mirai)", "value": "0be8dc5b14f065c35cf728bf22e60f39", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772461722, "uuid": "30553539-d647-4bd6-9709-a44107ce59db", "comment": "Malware payload (Mirai)", "value": "21bdf4e619089690261543b5425d190451368eb9e3cdde9fab2807c14fbbb263", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772461722, "uuid": "ffc8530e-030b-4a75-bcd8-92492e08ff0c", "value": "T1D7360A47B8924A83C4E4367ABCBD81C472A35EB99B9713666D04FE3C3BBE1990D353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772461722, "uuid": "d924ffa1-be9e-4003-b62d-865178143493", "value": "49152:EBHzBUH1Ai3req0+WYqd21gG7gHM3Fwr6Qm3i:EBHzGAi3r3CVG7gHl23i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772461722, "uuid": "2ea6b115-4e7f-446f-9792-dc7163c162c5", "value": 4980888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772461722, "uuid": "ce5810c9-324c-435e-9ea2-2efb98d2d92a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "212af53c-1645-11f1-87c8-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772462159, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772462159, "uuid": "7126a557-964b-45fe-8776-49e9eef441f7", "comment": "Malware payload (Vidar)", "value": "45bb3a259c36f008a8c25ff89ec9b0ff", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772462159, "uuid": "2b7c236e-3928-4cbc-8a67-776739d5aebb", "comment": "Malware payload (Vidar)", "value": "ac16b746beb8102fa45b69901a5f88d5c4289da12428c4e2fb421bc6418c45bf", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772462159, "uuid": "56d9a428-3743-4d30-b2cf-7d6b1921ca34", "value": "T1818607AB72B9816BC21D853BC096CF40F4F771755B33C5E382AD03699A428C58F7A9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772462159, "uuid": "2b446e11-1b95-4601-8e12-298f8d6ca967", "value": "98d407ce7cb1a3b4203bb905c8b5b3cc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772462159, "uuid": "4bccd9f7-2956-4451-b2e9-748a83dbe4eb", "value": "49152:3BWw3ljiKrjRxjeJXQaaD1QSy5G95iVOtD+SbZPurqwsjfLaRm/wjpkkJmxMj1D/:3rMepL1vL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772462159, "uuid": "33d45254-49b0-459c-a254-944144be28d4", "value": 8115200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772462159, "uuid": "d76168a0-2040-46db-9ab1-f3896d07e74b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64fc75aa-1646-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772462702, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772462702, "uuid": "6607a2bb-4a4a-4973-9b64-c11e9b2a41d8", "comment": "Malware payload (Mirai)", "value": "0d6b9675318ab0302700196027b30f90", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772462702, "uuid": "f3c7c77b-8403-4ac6-87da-9de4473d842b", "comment": "Malware payload (Mirai)", "value": "d67ddcd0e4d4b6a0d1c1902bac1304a2a14066f83169cfa70ad531cb84bbba00", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772462702, "uuid": "face5414-e026-445b-9de2-3ee3185f27ed", "value": "T1D6A32B46BD828A11C5C503BAFE1E118D331357BCE3EE72229D106F25B7CA96B0E7B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772462702, "uuid": "6ffb00af-0a19-499f-a9e6-6305e5678da1", "value": "3072:VeT81aycJHIK1+JfwJmXasoxHECueXL9cwbZnj:gT2ayc1IK1+Jf4AaTxJuMJcwRj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772462702, "uuid": "54a2c90f-1d7a-4616-aa48-93fc8c53f89b", "value": 99572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772462702, "uuid": "eb99c12c-ef1e-41af-a8b5-dcabce5c4293", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50e47083-1647-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772463098, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463098, "uuid": "794d7588-2381-43c8-9234-48614bcef5fd", "comment": "Malware payload (Mirai)", "value": "e1abba99442d3385053939c94ac693e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463098, "uuid": "16233d0e-b461-4f78-ae93-da97a69691c0", "comment": "Malware payload (Mirai)", "value": "6941c019f9adad48ebf1f6f0da6d84d57fc0e36ae26d3b975d022da965924164", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463098, "uuid": "761a4fb3-6390-43a7-a9ef-10efc06a76d3", "value": "T1FA241946BA418F13C0D627B9BA9F42453323A754D7E77306B528ABBC3F8779E4E225", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463098, "uuid": "a0a3518b-e612-4da3-8472-89f98e8f080e", "value": "6144:sWNOjvyvu8aYWsNWYAQykiAnRYXTAxM/RT3V:soMym8atsNWYAxVmQA6/b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772463098, "uuid": "cc169038-fcb3-4d48-ac03-674ec53b178c", "value": 214762, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463098, "uuid": "37dfa2ca-078b-4469-a74e-d7525a3af9e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "578981bc-1648-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772463538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463538, "uuid": "c748df0b-31b9-40c1-a03a-f944f945d6e6", "comment": "Malware payload (Mirai)", "value": "b788670b1a3111d69a8b95dcc44a48b9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463538, "uuid": "6e2f9b72-258f-4958-abcb-7739a7580234", "comment": "Malware payload (Mirai)", "value": "7a362ac503cebfd6be07a8473e56931e6c70b7b6773345c85a669cc0be050e45", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463538, "uuid": "6dfb5660-b5e8-4cb1-948c-c784c6f65f3a", "value": "T10C933B85F783E4F0D94A0AB0115FF73A7631DD322124DD7ADBD4BE63EC22A029456A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463538, "uuid": "a8f68f1d-e9e8-4957-b74d-39cc5f64373c", "value": "1536:mKU21lf+ATENHQUlfp8UgbSHUOUO31krKo7UurpiHW9n/wbZnzr:Pr1ZfgjlR8U+wyrYyphh/wbZn3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772463538, "uuid": "596cdc3f-ce07-40df-ac88-5abb3b84afd7", "value": 91640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463538, "uuid": "4e3c08bd-0dfc-45fb-93a8-647aedb087a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63f0cd47-1648-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772463559, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463559, "uuid": "ed04cee9-0820-4499-94e1-a2042051e376", "comment": "Malware payload (Mirai)", "value": "775a058386e11fac2fc8f80b124ba1dd", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463559, "uuid": "260e2f08-5cba-44e1-bc0c-323e9e857a38", "comment": "Malware payload (Mirai)", "value": "70705c6c7d568a7d73499601fb9e31f3cf52b854df18a91c2864c3ce17baaed2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463559, "uuid": "f2751fc7-6e0b-4db1-a29e-6f6dfe6364f7", "value": "T170045C46EA414A13C4D627B6BA9F02493333A7A4D3EB73069D147FB43F8679E0E635", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463559, "uuid": "6d578abb-1d23-460f-b02e-1787e6f8232f", "value": "3072:hcuhH7XAR9Ehhovraz11dOQ+P2Vr21mQOysv3C0qwbZnaKSDveM/90q3Rw:hcwH7wR9Eheraz11dL++Vr2VORfwwRa6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772463559, "uuid": "2d99057e-3fde-4ef4-98af-f1dff8f609be", "value": 178926, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463559, "uuid": "21f16288-6a93-4a68-8955-ff9f833f3881", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ece62573-1648-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772463789, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463789, "uuid": "75a71663-a50f-4ccc-bb62-48f2799edeb9", "comment": "Malware payload", "value": "def005d7cd5055640dd3e505a2b02822", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "pw-ppp", "colour": "#87E9B2", "exportable": true, "hide_tag": false }, { "name": "pwn-ppp", "colour": "#e69937", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463789, "uuid": "ee5ed192-2d1b-4d63-8115-79a6c642ac2a", "comment": "Malware payload", "value": "aa12923a0883338846f86eb63348eefd48bed27ad3bdc66e6b89c200b63b877c", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "pw-ppp", "colour": "#87E9B2", "exportable": true, "hide_tag": false }, { "name": "pwn-ppp", "colour": "#e69937", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463789, "uuid": "b2e76c10-1107-41dd-bb60-32037e563d68", "value": "T1896533DA26835A6574C5FC88B7A9807C55B93197B0833412F08FB4D2B171FAF86A9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463789, "uuid": "20296d11-4238-4622-8260-c746f3b21279", "value": "24576:V/BVRM8dLtJANuarcqsPhMODblvFR27/RwiX88nazm2g/IfkFN5C5nIE9agOleLN:VpU8dLtJAAaIqsPdblNA9w+nx/5rsMlY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772463789, "uuid": "282915ee-b7e6-492b-a49c-d476156c0177", "value": 1512144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463789, "uuid": "3c2987d6-4c14-479f-babb-54b3be5de346", "value": "application/x-7z-compressed", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10d65871-1649-11f1-87c8-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1772463849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463849, "uuid": "56f9a1b1-f41f-4129-9785-1d234879e610", "comment": "Malware payload (NetSupport)", "value": "82a019c4e64840faced30e8bc8f2d4cc", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "pw-ppp", "colour": "#87E9B2", "exportable": true, "hide_tag": false }, { "name": "pwn-ppp", "colour": "#e69937", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463849, "uuid": "3d0804e4-9925-4a4e-b548-78c5755bb19e", "comment": "Malware payload (NetSupport)", "value": "c0af6e9d848ada3839811bf33eeb982e6c207e4c40010418e0185283cd5cff50", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "pw-ppp", "colour": "#87E9B2", "exportable": true, "hide_tag": false }, { "name": "pwn-ppp", "colour": "#e69937", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463849, "uuid": "56e6720b-5ed1-400a-94c7-3e7f7208a5e8", "value": "T184E5339F5E439627FF7179AC28AE649FD50980874F379563CC1A1418CFB5A0E8FA3A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463849, "uuid": "d5fdea33-e543-4733-916e-b19c152dea94", "value": "49152:tCYvgm6WXgUDL5KG+EAm/6SHDhln/rhfk3yjJ59aXOHC82fBE5BFrBwniWU:SWXgUpB+bmCKDh5/gmJaXOH32fBENNWU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772463849, "uuid": "44d84da0-cc35-4d64-90a9-6bec28c35c6c", "value": 3025089, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463849, "uuid": "7fdca416-0958-4e14-91c3-099928ff9132", "value": "application/x-7z-compressed", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1316997b-1649-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772463853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463853, "uuid": "7c1eb98a-efd9-4f00-bd61-ffd17207800d", "comment": "Malware payload (Mirai)", "value": "1faa331d4abe34acc103251c2c7f7362", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463853, "uuid": "da7caf4c-9be5-4b13-ba65-bc83e8c1d96b", "comment": "Malware payload (Mirai)", "value": "82a5dabffb0bbcdb4595407acdf543c662570511f1abfc60cf0fd5bb054dbc8e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463853, "uuid": "ed21ac69-a85d-46d3-a21e-dcc4c0c87405", "value": "T183F33906B5C1C4FDC4DAC1744FAEE536E932F09C1638B26B37D4AB2E1E4DE205A2DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463853, "uuid": "5ed2dbcd-cdfa-47b0-961b-9b58721e6ba4", "value": "3072:D9K8NpKS5NIRJ2VlXHe2IFH4U8Fpsz7N2rTKcnhP+kOHiiiYAiiiiiii:5K8Npr5NWg//kWn5bO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772463853, "uuid": "93085c0d-5550-4d06-9901-87b11c2c5ada", "value": 165128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463853, "uuid": "a2a5f554-4441-421e-b06b-137310c7fe3a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e33a6d5-1649-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772463952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463952, "uuid": "3be84201-882b-447b-99d7-770eeae869f4", "comment": "Malware payload (Mirai)", "value": "2c7f0475c6d784153acd19cc709350b3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463952, "uuid": "b2cef055-2450-4e43-aeda-0fb482e25e7c", "comment": "Malware payload (Mirai)", "value": "7ef6565d9cf069a12118a8d4e2e9ed70dec53335b0dd35612cd1586dead9693e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463952, "uuid": "925f192b-e86a-4aac-b14b-a0441d082895", "value": "T1B8734BC5AB43D8F4E8560A71127BFB2277B2F53A0038DAA6C7947833DC56A01D6573", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463952, "uuid": "147d9ebd-134d-4936-a6e2-0af8cb879fe4", "value": "1536:2Lqx+GBIt+da7hicTrmULk3ENXWMTaRl0Ga3AT288LcBzMDxYCHwbZnL8:F+GBIt+d0hicTiULk3ENXf2IGa3i8YBU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772463952, "uuid": "14f639c6-a675-4a83-9d28-012c6f5f88d8", "value": 78928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463952, "uuid": "5cd0208a-3362-4561-977d-573a544dd37f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cac41238-164a-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772464591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772464591, "uuid": "05e54e3c-865c-4033-a944-e81bf3ace606", "comment": "Malware payload (Mirai)", "value": "3b662691f05ccf2cb04a1418b0e3962d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772464591, "uuid": "07946547-95f6-4f8d-a6ae-80b12f50e7da", "comment": "Malware payload (Mirai)", "value": "d3c3b099647f7f120edcd70d9d0ce0dc6aa1b20b90b4feb83cad596d8301955c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772464591, "uuid": "63659bae-1e67-4596-b58a-6edc37ad22a9", "value": "T16043E755B892D957C2D01376BE5EEB8E332573E4CACE3223F9255B2C3A8650F0D26E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772464591, "uuid": "caddd89e-b783-4515-bb49-39ce3c9adcbf", "value": "1536:j4oVSEZGInXG5/a4Suvz7ZtHMP7m4XDBRc8:soVSMGb4Q/4TBe8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772464591, "uuid": "552f1cbe-6777-41ab-9137-636ecd02f5c7", "value": 55888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772464591, "uuid": "05d5b76a-fe79-4f50-830c-58bf876d29c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03700c70-164d-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772465545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772465545, "uuid": "2ec642e5-e5cf-4d6e-acb8-8810bb9e83b0", "comment": "Malware payload (Mirai)", "value": "c261bfd2ddf4fbf40797478fc1064898", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772465545, "uuid": "29f23603-8a4c-49fc-b8ec-47c0974c60f9", "comment": "Malware payload (Mirai)", "value": "7aa3e5a9334845fd124ad7f2d89bcf8538c78a24a19f526ad1fe18e0027e1ef8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772465545, "uuid": "736b9a9e-1e55-4ea1-908e-153de2e1ee48", "value": "T175738D73C92A6D80D4484276B9B48F3977A3B840C6571FB64A96C97AC087EDCF1053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772465545, "uuid": "406932d8-c9b5-49d3-b111-5481dbffd49d", "value": "1536:ia3/9Vys4aNhWoDEmuRDIYFvEBKmJ4VPpJ0CYmG+9IAwbZne:iqlUK0oDEFfvEImapJ0WTpwbZne", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772465545, "uuid": "ea1ce861-fd17-4a4c-98eb-e01b2781ef9f", "value": 79628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772465545, "uuid": "2804b8c2-0509-4abe-a3a3-5eaf7ee0f4c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc9b1d2f-11ea-11f1-8369-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1772467446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467446, "uuid": "a46d6625-fa03-4aab-a2b9-79bd44191d71", "comment": "Malware payload (RedLineStealer)", "value": "11d120907a5692fd48598573d457b340", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467446, "uuid": "09fd9e8f-78ee-4fcb-b86c-718dbd3c8051", "comment": "Malware payload (RedLineStealer)", "value": "2ec9acdb6e5ea802f5cb40e00ab7e973f3b1abae4033ba46b79e10af695d9e6c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467446, "uuid": "24225100-ba03-4d34-9e74-c343c5934a93", "value": "T104935B5F33A430F8D5679174C9E14A46E773B87659B0A30F4774869A9F232C2AE2D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467446, "uuid": "c4133015-8c93-4bfc-99d3-1d92c753587a", "value": "48ca3036180f0cfc822176b8bce52945", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467446, "uuid": "affb6b2d-75e0-4bad-93ae-7a165a8fec5d", "value": "1536:gzKPUGVAND/R58vjohR2yTjV6cpFwb5Wnel16W9Xa+t1ku1ZTs0+:gzSU1J58vjohgyTjV6cpFwb3NK+3kgT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772467446, "uuid": "56e69995-b0f2-4522-bd16-d8201d5f3219", "value": 91648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467446, "uuid": "431f96e6-1b9a-4115-9274-a95932b463be", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72f54b6f-11ec-11f1-8369-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1772467446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467446, "uuid": "22a94446-53ad-4038-a665-66e1a97add76", "comment": "Malware payload (RedLineStealer)", "value": "b397b9309a04ea958aa087b7f8538551", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467446, "uuid": "a663ebbf-9984-4d61-848a-f8019abb72ed", "comment": "Malware payload (RedLineStealer)", "value": "8e75dc34d4e08c4f03db2fa125a1ecc90ad445e9a222d0ca191ba03827d823f9", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467446, "uuid": "cc3bf920-72d4-42f9-834b-9707d486d4fa", "value": "T1D3248E21B9928433D5AB097498F9DF75893EFC510F7169D763840FBE89206C1AF34B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467446, "uuid": "31423bdb-581f-46db-a87e-882228d65c66", "value": "59f37c13d2cae7cc547b602d07aa7033", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467446, "uuid": "625283a9-a304-4328-b1ec-f7a6a959d6c8", "value": "3072:QXiZYkCItXCGpSFRSJyE18jSaCTBIJCfCr8OIRachyk2Wh/RgaaATUxtN8l:QHkCItizSJJwYmUU3yacEkJTUD2l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772467446, "uuid": "6ad8dd58-95d0-45e4-af95-6ab27315b36e", "value": 209920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467446, "uuid": "230f8a78-8c12-4441-b3cf-33c121647322", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2ba2cbc-11ec-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772467447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467447, "uuid": "09227348-4955-4711-babd-5f0bdced4e1b", "comment": "Malware payload", "value": "90b20abf80b2ecb82243533259921223", "object_relation": "md5", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467447, "uuid": "b011d465-7842-4f23-8951-7a61e48831c8", "comment": "Malware payload", "value": "670c2800abc04f1612d73f0df5f5040f6f348a55464dac69039e5ef1ecc79575", "object_relation": "sha256", "Tag": [ { "name": "a3dacb", "colour": "#a7477c", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467447, "uuid": "f76415ba-c1d4-4e60-a314-75492f049906", "value": "T120545C4A77A440F5D9A78139C9A38A46E7B2B8650771A3CF036443B95F3B7E05E3E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467447, "uuid": "edcf86ed-e135-436b-80d3-e8c2b5395e86", "value": "3d85d3c28c2c171776d82f97bfb95153", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467447, "uuid": "fd1d0900-522c-49b0-a55f-e5cb6983b63d", "value": "6144:RvoTljfVSITGG9wNsf8cPR09QTiTrV2Z+qXTLrs+TpCsD:RU5GGiEPRoqXzs+Tz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772467447, "uuid": "fd7c04c5-d20f-4d15-9121-6e6ee670c9e6", "value": 295424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467447, "uuid": "4d9f4d01-a9db-4115-b868-9fb9525f3d8f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21613848-1122-11f1-8369-82aee05be84a", "comment": "Malware payload (RedLineStealer)", "timestamp": 1772467447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467447, "uuid": "72928d61-e7f8-4dca-b464-f81ff9cbdf4d", "comment": "Malware payload (RedLineStealer)", "value": "838703d503b5c20e07412c080c1dfc62", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LoadedPL", "colour": "#3aedee", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467447, "uuid": "c7338c0e-aa31-4c8e-9547-56756fae1590", "comment": "Malware payload (RedLineStealer)", "value": "599f8044ac833677564223f34b28fc9286c40683095485ba366ec465accdfa74", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "LoadedPL", "colour": "#3aedee", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467447, "uuid": "3b91ac18-183e-4a5b-977d-6f2c234e867c", "value": "T1C5645A5833E8CA10DA7F4775D861D67093B0BC63A552E70B4FC4ACAB3D32740EA51A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467447, "uuid": "3dbf6692-5c7d-43a6-af32-180d2f61a1c9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467447, "uuid": "76fd8580-45fe-415b-98c8-e469d9ff5b4f", "value": "3072:KcZqf7D34dp/0+mAOkyoSMQQgqDB1fA0PuTVAtkxzl3RceqiOL2bBOA:KcZqf7DIHnmn8B1fA0GTV8k3kL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772467447, "uuid": "727b75fd-0c91-4c65-8b95-a73c07b39c8b", "value": 307712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467447, "uuid": "9fd6fc7d-0460-419d-a561-bd5fe5204e0a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1133bdc-1216-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772467449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467449, "uuid": "735cae97-8e3b-442f-8efc-4fb09eb71fee", "comment": "Malware payload", "value": "c16e34136024dcee8257f7847cd778a2", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "clipbanker", "colour": "#5efbe3", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467449, "uuid": "17ba974a-d0a7-4944-aab5-a2cc1f9d3435", "comment": "Malware payload", "value": "19cf650c891876f51413ba4448ad3f29bcab6271a4af6146718c4dc6f1af8a8c", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "clipbanker", "colour": "#5efbe3", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467449, "uuid": "e6b0be79-9df1-4807-87ba-d10450115b31", "value": "T133547C15B3A414FDEA6BC17DC9424945EB72BC5647A1EBCF03A04BA22F136E09E3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467449, "uuid": "fc61666c-dddc-4aa1-aeea-9bc125e34131", "value": "8f1204fd0f9e5fde1ea21874e8cd273b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467449, "uuid": "edd52b83-45d8-4b52-8d90-5ddef919ad08", "value": "6144:Y7W38hxAg1cLdQiZGP19vPdbbP5F41AcM:Yk8XsdjkXvRbH41U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772467449, "uuid": "7881734f-b97c-4c44-8d2e-fc176ceca4e0", "value": 292352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467449, "uuid": "822962e8-00ba-4cc1-a4d0-7846c93c7f9d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64f00548-10f8-11f1-8369-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1772467449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467449, "uuid": "6e3bf3fa-34b3-4e15-9c94-a6c203461a56", "comment": "Malware payload (Stealc)", "value": "f674075c28388137b66df82d05066330", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467449, "uuid": "c6dd65ae-9a60-4829-8958-d515ae20c6b9", "comment": "Malware payload (Stealc)", "value": "b91cebec72ba934cde8ee67e8c4135c8c558d8ff46a70d3fdca83d9c37dd377b", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467449, "uuid": "30efb641-7182-4148-b0b5-94c8f3e99b86", "value": "T1D5F47C1BE7A602F9D1B7C274CA424957E772B8065370978F03E14AA61F376909F3EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467449, "uuid": "503f9bc8-fa51-4ab0-9d1b-668b177c9ccc", "value": "f456face36cfa724bf01290dd8927512", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467449, "uuid": "fba88977-fdf5-42f0-99c0-6759c10310d9", "value": "12288:NzDhwo1qqr/aead+W3cyMzNP8WTopMRWd38yxBlDetAqxSva:D7NaeRW3P2k0WWUsybS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772467449, "uuid": "79dd1c66-1dd1-4a7a-beda-a3f8eade5d34", "value": 779776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772467449, "uuid": "f7f9d993-fa46-40dd-a902-988d62538ad1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f4a0aad-1658-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772470450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772470450, "uuid": "924db234-7835-4b66-a0b0-17303dcf6142", "comment": "Malware payload", "value": "dc6833c9a5817e213e0fafd58523a3ee", "object_relation": "md5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772470450, "uuid": "8c88eccd-8c39-4346-83ee-6dc3546a8325", "comment": "Malware payload", "value": "beea2c351f31771d2e6fc284509212a4f69e74f06dcdc9385eff85372dbf71b6", "object_relation": "sha256", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772470450, "uuid": "78c62363-18c8-468b-a899-916a2ebcb937", "value": "T188454A5AE7A114E4EC77D1BC88815206FBB0B8684720D7DB73AC851A1F336E89E3DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772470450, "uuid": "847039a0-9428-4abe-8fa6-f5e203d01d9f", "value": "aaccd3027895e88f71ee1337a879e66c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772470450, "uuid": "9ceb27fb-d286-4b60-8892-fca778f44180", "value": "24576:eMXJjhJGc8w2UNiXTtniFuuNvGgjjsrdcAONdA22xVK8LRPo4WDD9/wr9W:eM5lOAiXTQn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772470450, "uuid": "cbd2ab9b-5165-466e-b304-cf0ef908df1d", "value": 1252864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772470450, "uuid": "3d6129b0-c5c3-481f-a393-ee085ccd51c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1201b5d6-1662-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772474588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772474588, "uuid": "1372e1ae-eb4b-41f0-8ea3-b997739ae3f8", "comment": "Malware payload (Mirai)", "value": "987c8843c917f337571d8437daa630f9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772474588, "uuid": "d0a4d750-0fe8-4bb8-a02e-403ad6bdee4e", "comment": "Malware payload (Mirai)", "value": "cec7a0a55b41d85606ecfe3b39d64fa8d589bdcfff54f673637f7a2c6412aadd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772474588, "uuid": "eba6a339-f6b0-4b3c-bc9e-da09307685db", "value": "T163B36CC4F643D4F1E85305B1187AEB369B32F479192ADB42F3789B3D9C62500EA1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772474588, "uuid": "bce2e5c5-8acf-463e-8ed0-9ae36f4e3ce7", "value": "1536:5srPpFKO+Gk0/33FfpRvWcC/MdwA73uemf0BpSJWm+hflMgFs:5srPp6F0/33FfpEhML7+ejgJeqg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772474588, "uuid": "e774eaa2-f7e8-417e-94f8-96db68c1946a", "value": 116876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772474588, "uuid": "a27d0551-300a-4753-a61b-061d7af19b25", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51967702-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "99d16d76-ba5a-4d2b-a547-e5184e7ef03d", "comment": "Malware payload (Mirai)", "value": "3e09bac130a23b18bdb7b116fc0cab3c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "d1a28232-a6ae-4f1f-8ce9-2a74653ca1da", "comment": "Malware payload (Mirai)", "value": "a338834f2c2dd7ef6fad4b9463f8bd4c8c733c15c36baf595b4841b9b2226816", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "39e27648-e866-4971-907b-b1033f5a05be", "value": "T16213F170E6114592E23C863E5BB3BB6A7FF1037116CEDD126152B8FB5C8E5B858038", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "6f49230d-60bd-4eb9-95aa-a066f1292aa1", "value": "768:Y+b19XkdGcvsLV7lYuAXgPliB+8f166AV7dwrDLXtVbTMtr1qVvJgGlzDpbuR1JP:jHdTBloXgQ+8lAldyDJx81qVtVJut", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475554, "uuid": "a74a0d97-d31e-4829-abf9-8649be15dbd4", "value": 43168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "2fc60f31-1911-4e3e-b7bc-02eceb627777", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5197424d-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "88875404-409d-4492-a336-63736723e275", "comment": "Malware payload (Mirai)", "value": "182274283ec00501c02b892c51e0b87b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "a66981cd-fc80-4191-8217-f2a3cdbf3512", "comment": "Malware payload (Mirai)", "value": "b7e7ddc4b125d0669d47ffb755b3d1991665fab995ba2a37e9d3cd88cae75909", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "445edf1a-d54a-45e0-863b-238e40878361", "value": "T16DB2C0A0609E7E31CA341C7AAD75869F7702463CE4F9392229D126EC7CED421497E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "c859c1db-c381-40f0-b2b9-a68d18b2b91c", "value": "384:YJUYGaFySa4ptElzMAtDsAnuTdmzOenuJ6hMyK8YU6ClFMn/2RhgxhymdGUop5hq:o46elosQssYOeU/yK8YU9MuRCxs3UozY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475554, "uuid": "deba42dd-e309-4c20-8198-ffedfce0fd17", "value": 24032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "0016d2d6-9a48-4051-9b21-aaf67083bee9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "519df021-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "358509fc-b8d3-416d-9eff-694a416d26cb", "comment": "Malware payload (Mirai)", "value": "22fbc3c8a593649e56c5a71f544b2252", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "08c0a864-5fd5-4532-9d3b-4f0a25d8adbc", "comment": "Malware payload (Mirai)", "value": "0bb275b2f2d5855214521060a122453d47b631b6c8227015332cbacc943e0bd9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "b269ed96-54fd-4f3e-b7b2-eb1bc97ffa77", "value": "T1A0D12FF2B4C5567CDE9FD83E611829BD2085BA9B1A875D6487FE20A57C89FCC1C409", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "7b5329ca-411c-47a0-9e8f-1c2cc6a77634", "value": "192:IB3mBnIOBqEjp83p8C12wWk7sqSgnAOZPOZPZPOZPaofIG3NwDVgGpiMGUr8arxi:IB3mBnIOBqEjp83p8C12wWk7sqSgnAOF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475554, "uuid": "c702ce31-b987-4f2c-8432-d5e3dfbc8435", "value": 6419, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "00b761b5-503d-477a-a7ce-19bd1ff2ed4c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "519e3a42-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "5fa28df8-f5ad-4201-8c0e-6e7ed0410338", "comment": "Malware payload (Mirai)", "value": "7949482a68617479f102217caa766127", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "241ddf2b-cde3-4e2c-a66b-6a5fee77e913", "comment": "Malware payload (Mirai)", "value": "5e529073c1d8adb8640aab40eb65cb12079803f351aa15069cb61e41c1461bad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "3a2d1b36-cb7f-4356-a32f-39713c08f02b", "value": "T1C203F1B5E126CF77DE4EA834CE00E39127B2CBDA52632594934A7F810B5766DE080A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "189958d9-fe53-4080-a4dd-683fb1482b18", "value": "768:jJinu0ArfdDt5GsdY0aKc9vK2VpfeRi3QxFnH6exxm2glF0X/ONsoRLm23G84uV7:jknbArfdDt55EKc9tpGU+hHLMOX7o/3B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475554, "uuid": "3f4d75ff-a34b-4ef1-bb35-39f0216e92c9", "value": 39936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "dc20b825-496e-4472-b9c2-c2ebca2bd694", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51ab1ecd-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "3ef08c89-cfee-4fb2-a187-f85608d6d77f", "comment": "Malware payload (Mirai)", "value": "05e0d8b43d190abf44ff8fd027033941", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "e4c95252-639a-43fa-98df-eaa87c746a80", "comment": "Malware payload (Mirai)", "value": "b1875efd4743a4cb477d2f9b65c9aac7bf55403cbd372368c268d386a0bba0b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "11edd07f-1de0-4989-b392-7e3add1f9649", "value": "T15463024AEE2B15FEE24804333D2E8C4D67598A74F0187D6B4A13153E25B0CA67FD4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "1ddd1be0-0d54-4d62-9560-66991f429f89", "value": "1536:hM+3oF/e5MMnjILFs2emKt+xJLGA65T6GUML/VIb:aPe2wgFsBmtfLGb5T6DMS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475554, "uuid": "dfc091f6-f20f-4a0d-b5f4-bc7644fb5fd5", "value": 66940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "3fe0e4c0-f835-48b4-ad8f-29422a12e242", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51ab839d-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "31967c1a-1464-487e-97d4-2d3ff0ee6bdf", "comment": "Malware payload (Mirai)", "value": "ff4699bd07710c62a551d65a710d070a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "405f11cc-439f-438c-a467-b47a6d1d0cb5", "comment": "Malware payload (Mirai)", "value": "bae4d160ce1d7482c0a922703bbbe32ce623995d020505293c6875fc740f8770", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "f023e44a-5a28-4f00-a1c6-3aa602381b3e", "value": "T160C39E87FB8B10A0C8124AF013C71F9D6B57A211CE5FE8E3BC1E663B5A7A4DB15167", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "986932d2-1dca-4132-8b3c-fb607119b50d", "value": "1536:ut+2mPrGbK8njCC5nRW6ySerf52T+7C7tFdil9/XqgQYnxP/kgEvEf/LW7:utQryKojC6c6ySeL5cYGfdiPqvYGgXq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475554, "uuid": "1ed164b5-0c75-4dae-a5ac-1f235150f715", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "79f8184c-352c-4b32-9e4e-10bbf3c712e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51ad968c-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "7793799c-0df4-4fb4-a5df-48cfc87d7b80", "comment": "Malware payload (Mirai)", "value": "83c6c727b171ddd2d4e2e394ec98e208", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "3eeae269-1eaa-43cd-8c28-9983ac014661", "comment": "Malware payload (Mirai)", "value": "e98cda86083fba2a54e57b88e49ff6e91dc3c4b1f0fba25daca20cfa95afc919", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "0b2d6755-9b58-4692-8be9-d41048d71f3f", "value": "T103936C22FA79193BC4C4A97762F34726F2F6438B24A89A1E7C720D8DBF1465022577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "b657711d-bd36-44c6-b0e0-c4a58bfb873d", "value": "1536:/IOOuLsIgE4zNzO9uIgmL0LNOUxVg6tJlaq5u0qQ7Z5t83Nau:+9fOWAUTDla6uPXau", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475554, "uuid": "10525bfe-284a-4348-a45b-74adfcd6c2d9", "value": 95056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "67640d36-1d81-4639-ada9-12006ff29c21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51adb0d7-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "1c901802-1f44-455f-90cc-24517937a27f", "comment": "Malware payload (Mirai)", "value": "d135f4e216152da99d7d1fc4b26197f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "4aa4805a-b751-459e-9dfd-76971f15bf4e", "comment": "Malware payload (Mirai)", "value": "670c9a342810a0489d1aa79e3de71d35297e8301c10ce8e845ae72c0199f23b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "0bf818f5-b702-4b4e-8be0-13b0e9ee594f", "value": "T1A5A349D7B801DDBDF80EDB7744530506F272E3A219831F36626BB967ED351A81822E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "e82455f5-d662-4f6e-8e2f-6d3722cb8ff3", "value": "1536:Unkppk4+ehabR4mCcY17w/Mlm8IxTrKm+lXcmhbfeLEoWCa1ACozE:TJa1V47w/Mlu4XNhLua1ACuE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475554, "uuid": "495095e1-9a27-420b-bf93-33ef81401548", "value": 98680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "d2852e61-5648-4583-80b8-19c195f23b64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51b6d810-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "d01f3b3d-2f3b-40a3-82cc-401b48eeeae2", "comment": "Malware payload (Mirai)", "value": "e017a5bac19711703815c284da5a69bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475554, "uuid": "c7fbb648-3c53-412f-96ea-7a88797457ba", "comment": "Malware payload (Mirai)", "value": "649a70f0613aa8e397bc50a13e8411cd557fb60e70187bedfc62ba728a3f500b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "e9b0f879-ba0a-4bc1-a3b2-471d1077579b", "value": "T14703E04B9CDD8F44D962A3354DEAEFAD0418E0064DD89873B4C4B80759DABDE3C297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "51b0f491-a18d-485b-8040-860c85dcb7d6", "value": "768:Z2mC2QJ/9tQZFkt8wxWIcZ97ZbEhgEx41+F8K0p8z2aX/8+NpnbcuyD7UtQRjO:uJFyDkt5QIcZOgEG1i8Kw8FX/xnouy83", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475554, "uuid": "46022511-77a2-4e58-a771-40f71efa3a92", "value": 39348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475554, "uuid": "c8722686-028a-4c2d-ad27-3f1217346495", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51e445d6-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475555, "uuid": "4b4f597a-035d-40aa-aead-a3bddea49832", "comment": "Malware payload (Mirai)", "value": "48f98a84f195bc882d9a9c694da774c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475555, "uuid": "6d849377-9b52-482c-846d-e97b2093837f", "comment": "Malware payload (Mirai)", "value": "5fe7ec8cbfa436891542b23715ee298a305821bce1de59d679b8b1d3861b0616", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475555, "uuid": "879c620f-44c5-432d-a30e-269cdd938d31", "value": "T1A703F1CEF4ADEB9DE6CE113098BB3B5D2951D0AEA45CB4455FF2A142090DF613C487", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475555, "uuid": "ab76f701-cbe8-4fce-b5f6-b2171424ad33", "value": "768:AZfd4q3fu4bLq84zx+igAQMEJ52GW5O04md2YiInpb4qIw6nbcuyD7UtQRjs:YdhnbLPmPE2Ddtn6nouy8tyA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475555, "uuid": "0b12d0aa-656c-4c18-a0ec-0ed5d915dcca", "value": 40320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475555, "uuid": "223c8a98-a212-491c-b9ef-6776ce18c01d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51e82701-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475555, "uuid": "67839333-157a-4055-927a-7f7b17815fba", "comment": "Malware payload (Mirai)", "value": "7d1a5dc3767dd8c17a25a5f579a0af86", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475555, "uuid": "3c282db7-0c24-4a27-9f37-50a2c3d18e10", "comment": "Malware payload (Mirai)", "value": "32d89b0e80ce5a85553b495a1efac09df9468e1182701bdbb0b44554732b9548", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475555, "uuid": "bde5b36d-c66d-422b-85ff-a72439836c30", "value": "T14A83AD73C86A0D28D44844F0B0A4AF3597A3E112C5972FF69896C679E08BEDCF5463", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475555, "uuid": "bf10a631-d32a-4783-89d6-e2d23a13bf2b", "value": "1536:m3JrMxaPDE1qaKX2YHKKWBSY37gKPCnc+zIGypn:mVMx5WX2CNW77gKPtK/Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475555, "uuid": "d47f31c8-8bc2-4cbd-a283-39e757e2c9c9", "value": 81140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475555, "uuid": "ab352654-1082-4ba2-a467-84f464d24b49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "526e78a1-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "2f8b54ad-5391-497c-a504-79ac0326507b", "comment": "Malware payload (Mirai)", "value": "d2cdd339b6e758a2d18db7bb1776e57d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "2842e15d-1425-4bfe-bfec-628e62badf6d", "comment": "Malware payload (Mirai)", "value": "b6e45dc06528dd32144971dd91992b76ea0ec576977de10056124f1131091b2e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475556, "uuid": "c4df5c09-aab5-4e36-af75-943076964514", "value": "T18403E107D194D757D0EE00F239FAD9272258C40E36D86AFE6FE8A7361561BD92C0A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475556, "uuid": "f82b39b5-55a4-4d56-98be-e4bbc5fab40c", "value": "768:s1CgdkrWLnCkUyZjRLieKaaMdfEcLu+ZKE0OUfKMnnbcuyD7UHQRjW:+gCncsBG+Vu+MSUiMnnouy8HyC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475556, "uuid": "c926de9e-a095-42a4-bb49-4b5fd2b398b5", "value": 40548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475556, "uuid": "1dd13774-06c6-4475-a955-644c20c33970", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "527fa8d1-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "5b23f7e0-6d7b-4276-800b-0010a12fca20", "comment": "Malware payload (Mirai)", "value": "bf88a750d0d11caa72f4859ab507dec2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "cdcdf5f4-20d7-46bb-b7a7-d39d71e614f1", "comment": "Malware payload (Mirai)", "value": "5f75b1e4ebb2b686befe2664644c2d5383f47e75b719ecf2c5ccbc9562039bee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475556, "uuid": "0d4c0038-1a9d-4591-946e-d0aa6f63905f", "value": "T12C13E09024166C69C1707A3A8C3145C355BA0FED822075FBE9281B09B6CDD9B6FED1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475556, "uuid": "819c2c5a-7ccc-4a90-ab3f-f503b4079777", "value": "768:G+7dvHHaNaCXO99K43xZbqcEGeGAvxpj2O2SmEioycvpcrwh/sV9q3UELfI:G+5vnVIO/K4bbq3nB2rSmEiY9h/BLg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475556, "uuid": "fa30a35d-7a12-43ab-b0cf-7d2114d7f2f1", "value": 43712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475556, "uuid": "57a0cffd-d5f2-4ae4-a825-53cbae206171", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52881428-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "7b427c8e-53e7-4f89-a9f4-9357e4557c60", "comment": "Malware payload (Mirai)", "value": "a2085bde1a693ec6084eb5069b46d078", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "acc56ae8-8dd9-484b-a42d-6c48d208561a", "comment": "Malware payload (Mirai)", "value": "31591c3356cf8c2f9b9c70eee2a2337b812902fe26290c3611c063c4a575ed0d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475556, "uuid": "6a93b8db-3a6b-43f3-b3da-0e0bc1bf1fa5", "value": "T11C13F18DC6C0A587CE7E473E00185660DEE670C813DB1F427B585EE5689790FB4DCA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475556, "uuid": "258b7c64-d118-49e5-bdda-629a71b473da", "value": "768:shqKs5iKrLl85YHIk/K28QXZbbpoOIHQyTPAbiP652v2nKWZ:yqB5iKdHDD8Wl1ZIH/Y72Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475556, "uuid": "486e966d-77c0-479e-ae09-2995b7771b18", "value": 44060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475556, "uuid": "6ee812b2-d695-4ddd-9218-23ebdfa1f347", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7363ca3c-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475611, "uuid": "4662e82b-61b4-44cb-8dc9-898d301ccf63", "comment": "Malware payload (Mirai)", "value": "f2fcee285dd8734a414973b3a0806e08", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475611, "uuid": "2b32c985-cee5-418d-8b78-de641f915248", "comment": "Malware payload (Mirai)", "value": "6bbc45592f5d2033fbd59ac876a2f022fb75a4fba2e57c6c9fae91ebc750303b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475611, "uuid": "ab432f51-237c-4b12-a399-03be090ad391", "value": "T15503F1B5B1C7A8BAABBC3C31EAE8930406054FB7894E3BD24B414EDC12891CB533D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475611, "uuid": "8875b905-ef19-45af-aedd-685de6d84bb4", "value": "768:/NNp/xeePLU7f5x8OmZga3d31OvK6UaE7VyqVSCqAYYEuWPAs3UozTo:Xp/Uej2f5x8OjaFx6UakSC1YAWP1zs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475611, "uuid": "002cd084-fc18-45c5-9d65-452066beadbb", "value": 40932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475611, "uuid": "bf1800aa-68d7-4359-81fc-ef68f3325e28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75e192d9-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772475615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475615, "uuid": "4fe9f86a-3fe5-4166-ab2c-20d8b689a083", "comment": "Malware payload (Mirai)", "value": "9d312438fc2519be3a77b865f881ac00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475615, "uuid": "3f48b9aa-12c5-46b0-822a-dd8b54f222d0", "comment": "Malware payload (Mirai)", "value": "78b248d5d81b00b7e3e9d9df173f106a81d6a6bd0f7a84694d37fd42329c3d98", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475615, "uuid": "f8e312e0-75f9-4150-885f-5ba57edf886e", "value": "T1ED13F2D7A3A7F474D8B7E0B2641F96A0EF70706F4E41572D04A6927E6CAA1C83752A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475615, "uuid": "f7ac059a-fc11-45ef-b5e4-f747ca4568fe", "value": "768:ISq8ZtA8oC0ncTxSv6lAZWYY8PSpoKb13Stt8GMQ+u6gRzHpFRx09g:g8ZKRCMcTo6lApYUgCXDMS6gDcg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772475615, "uuid": "21a03031-47c1-4fc5-9662-6650662c298a", "value": 41880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475615, "uuid": "4ad3a141-a66c-4c65-b3b1-c9d5b269bafb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d7a526c-166c-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772479091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772479091, "uuid": "e50f4c55-839e-412c-8bdd-38b52e83f44d", "comment": "Malware payload", "value": "3319db89f6b0372f7381f52e514190c7", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772479091, "uuid": "2ea5fa76-c96d-400e-911d-e5d298d77ec4", "comment": "Malware payload", "value": "de0e0e528886830ef37fdd97352113523ba4e5f2eb03efeee9c68f983f45d32f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772479091, "uuid": "4f54077a-5443-4494-b66c-53eb5ac76a86", "value": "T1BB462B6396EB4CA9CDD7A3B866CB53326334FD3589385B2B5644C5213F136C06E2EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772479091, "uuid": "0273fcf1-56a9-4fea-b7b5-7174379c8d24", "value": "9ca4ec370f5a973886c8f32bb575352e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772479091, "uuid": "d8761431-3e34-45b9-a6cb-68a717c7980e", "value": "49152:97U5tkRWwEyMHu+kPCN346s3ruRMPjXRIbU84GAv4g45uI5sOYShIRx0y2+hOxZD:i5+mbFAUsOMNsZcS5huGGYcnfWxAde", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772479091, "uuid": "906a2ea8-6b0b-45c6-a105-9cf0b7774048", "value": 5503973, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772479091, "uuid": "84a2dcbe-d258-4763-83cb-850481b88d48", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d9e1f5a-166f-11f1-87c8-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772480406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772480406, "uuid": "67d5a263-f0f9-4b94-bc5e-c30378e47336", "comment": "Malware payload (Mirai)", "value": "9c0015897bf108d6974f88556b39b093", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772480406, "uuid": "fdd1a7e2-0031-4737-ad84-ea21bce243b5", "comment": "Malware payload (Mirai)", "value": "b5eba4e324041caef08c61ea2c021a91c80957838bd2334f2381d45a5a801a07", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772480406, "uuid": "fab54235-b264-4097-881d-48136129442f", "value": "T1AB0439D7F801DDBAF80AE3360C534906B130BBE518825B3332577B6EED3A1951967E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772480406, "uuid": "c1063ca3-0159-4566-b94f-67cb9432c4eb", "value": "3072:+/BYDQSHaP3WdMpayTvh+ai5N3dCirdtyNVwjbiTLlvbl+TzNZOB+q:FDMMyTJ+acNNRty5Llv+ID", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772480406, "uuid": "6820f60f-f2fe-4763-aeff-5c3c7215a813", "value": 178624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772480406, "uuid": "339e94da-abf4-4f38-a747-c04a4cd2e01f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e33aeeb-1670-11f1-87c8-82aee05be84a", "comment": "Malware payload", "timestamp": 1772480810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772480810, "uuid": "61220fd0-add3-4cf1-ac55-702273384700", "comment": "Malware payload", "value": "b1b7fcaec0d1543cb28c14e844049d4a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772480810, "uuid": "99b3329c-058e-40c7-9e31-6129f6583006", "comment": "Malware payload", "value": "6ee22bd55de11b98a2ade9056d560c5e98261ba03a7b27381085284f0aa40b73", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772480810, "uuid": "b3c8ba83-29b5-4d3a-b276-5f7a9021ec01", "value": "T17C24CEDDE7DEF0C21E9B8C8BA9608596C6D834A2D7DDCC6DAD056CAD0803766439CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772480810, "uuid": "0ea66dcf-655a-4c3e-95b9-0899b5221cd3", "value": "6144:mrUlpTrh8PNqXMiC0FRXjYYqa5Em8fleyG:molpTWPNqciC0vsIELflm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772480810, "uuid": "56b43ccd-5582-4781-b324-81e892263958", "value": 223313, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772480810, "uuid": "d1baa997-ecec-47f8-b81d-74d7934c8f6c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772482163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772482163, "uuid": "d5163162-d63a-4bc7-8983-5e3bc5cec106", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772482163, "uuid": "0954cc15-c5ea-4a4a-bc43-1f08df1105b6", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772482163, "uuid": "c05111ca-84f9-4026-9090-b2597cb49c24", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772482163, "uuid": "09fb1409-af4d-4018-ab6e-1484a057477b", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772482163, "uuid": "d17fbf0b-b50e-4993-af77-af8a78204968", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97260a33-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1772486719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772486719, "uuid": "628e45b0-624a-4187-8166-1d4fc246f200", "comment": "Malware payload (Hajime)", "value": "b8ed2cb3e9fedec5b164ce84ad5a08d0", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "rdgn", "colour": "#cb07b3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772486719, "uuid": "dfaeb54f-c892-4d47-8c9f-3c1bcc5aeb07", "comment": "Malware payload (Hajime)", "value": "d5601202dff3017db238145ff21857415f663031aca9b3d534bec8991b12179a", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hjamie", "colour": "#0c8ce8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "rdgn", "colour": "#cb07b3", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772486719, "uuid": "2e8105d5-fc57-45f1-ae54-5b3216d1c132", "value": "468312CFA4598B66EC7ACDF809DB59044D46621E738B75EF530CD59C2038B862C8E92F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772486719, "uuid": "4131ad16-70e5-4ead-9315-6492ed57dc29", "value": "1536:m3LqE6rUQWzVQR7iAGEcUT5PIi7pLqBNs4LOjcwf4nB6XuzGNy+iSc7tNUZM:mOE6PWo1T5bz4LVMXuzVNScWM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772486719, "uuid": "eb4d44c8-e3d4-4c73-bdaa-cd0dfbdc5b52", "value": 85128, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772409691, "uuid": "f84dcd16-15ca-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.191.220:40219/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772409851, "uuid": "5728cbd3-15cb-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.174.134:53635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772410456, "uuid": "c01d2140-15cc-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.110.15.80:46077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772410810, "uuid": "92fc5dc2-15cd-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.181.163:40581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772411174, "uuid": "6c4fee25-15ce-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.98.86:36095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772411356, "uuid": "d85b26c1-15ce-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.174.134:53635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772411357, "uuid": "d94cfb20-15ce-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.191.220:40219/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772411779, "uuid": "d473c9e7-15cf-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.208.63:48584/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772412079, "uuid": "87593225-15d0-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.110.15.80:46077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772412489, "uuid": "7bb15dad-15d1-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.45.201:37055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772412792, "uuid": "30a0ea27-15d2-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.93.65:52693/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772412974, "uuid": "9d32154d-15d2-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.24.221:58389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772412975, "uuid": "9d9b0a0e-15d2-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.0.26:59187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772413027, "uuid": "bc83c9fe-15d2-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.91.117:49083/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772413391, "uuid": "95618269-15d3-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.53.195:50982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772413633, "uuid": "25c52dc0-15d4-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.102.26.245:40924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772414232, "uuid": "8b03d5fe-15d5-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.91.117:49083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772414648, "uuid": "82c191fe-15d6-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.24.221:58389/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772414714, "uuid": "aa1bdbc4-15d6-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.10.237:48140/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772415549, "uuid": "9b74c4cb-15d8-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.102.26.245:40924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416089, "uuid": "dd664beb-15d9-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.184.141:44155/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416154, "uuid": "043b311a-15da-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.110:53417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416211, "uuid": "263775c1-15da-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.29.78:33756/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416332, "uuid": "6e3f2706-15da-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.74.165:57363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416333, "uuid": "6f3179fa-15da-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.29.161:41138/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416687, "uuid": "422219c4-15db-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.233.30:48367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416694, "uuid": "462bda89-15db-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.29.78:33756/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416694, "uuid": "467614ad-15db-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.65.19:51752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416949, "uuid": "de28abe8-15db-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.64.33.107/files/client.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772416991, "uuid": "f7059f2c-15db-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.167.95:45520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772417051, "uuid": "1b07c254-15dc-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.156.226:37185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772417294, "uuid": "abd7a71b-15dc-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.65.19:51752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772417596, "uuid": "5fc75aab-15dd-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.21:53408/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772418187, "uuid": "bfe41c43-15de-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.17.148:38893/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772418251, "uuid": "e65f02f1-15de-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.167.95:45520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772418491, "uuid": "75650c63-15df-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.118.242:52470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772418554, "uuid": "9ac6ff5b-15df-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.219.162:56537/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772418730, "uuid": "039d96f9-15e0-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.156.226:37185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772418910, "uuid": "6f29cbcf-15e0-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.153.240:49352/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772419334, "uuid": "6b7c0c25-15e1-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.21:53408/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772419873, "uuid": "ad042ac3-15e2-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.201.13:59712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772419928, "uuid": "cda8039a-15e2-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.118.242:52470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772419993, "uuid": "f465b803-15e2-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.40:43514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772420115, "uuid": "3d5de1ce-15e3-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.219.162:56537/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772421433, "uuid": "4f047226-15e6-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.40:43514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772421975, "uuid": "920755f2-15e7-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.81.59:48696/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772422392, "uuid": "8a73dc9d-15e8-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.24.208:53232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772422448, "uuid": "abde847a-15e8-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.231:56341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772423053, "uuid": "14788b4c-15ea-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.29.0:40946/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772423888, "uuid": "05f3cd56-15ec-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.24.208:53232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772424855, "uuid": "4686dc2b-15ee-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.61.228:52710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772425686, "uuid": "35d88e9c-15f0-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ozaik/testagent/releases/download/w3d/update.3.bat", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772426231, "uuid": "7adcbcaf-15f1-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.61.228:52710/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772426893, "uuid": "055e7088-15f3-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.153.84:32877/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772427144, "uuid": "9ae846b9-15f3-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.53.111.88:43734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772427324, "uuid": "06093449-15f4-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.53.111.88:43734/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772428034, "uuid": "ad8c3859-15f5-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.195.152:36311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772428687, "uuid": "32aad7ad-15f7-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.153.189:39520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772428990, "uuid": "e761d37d-15f7-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.195.152:36311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772429654, "uuid": "73059946-15f9-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:34718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772430188, "uuid": "b160d29b-15fa-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:34718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772430847, "uuid": "3a0d45d2-15fc-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.25.57:47113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772430968, "uuid": "824c69a2-15fc-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.25.57:47113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772431090, "uuid": "caa3a1b2-15fc-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/965337998/Dl7OeDq.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772431478, "uuid": "b2564236-15fd-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.231.59.27:47011/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772431755, "uuid": "571e5af4-15fe-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.244.128:44424/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772431933, "uuid": "c1a36009-15fe-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.19.92:47775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772432192, "uuid": "5be16dbc-15ff-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.63.19:59583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772432353, "uuid": "bb921c94-15ff-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.41.37:51879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772432415, "uuid": "e0870240-15ff-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.63.19:59583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772432534, "uuid": "2766f01e-1600-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.94:42135/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772432895, "uuid": "ff0aed1e-1600-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.8.47:41491/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772432946, "uuid": "1d229c97-1601-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-0fd793cd3be34819ad48d5cf2e05bb72.r2.dev/sev.dll", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772433128, "uuid": "8991392e-1601-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.41.37:51879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772433135, "uuid": "8df8000b-1601-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.185.28:53132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772433187, "uuid": "ad149518-1601-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-2159475f6e9c446cae5a8cabbb7c98e4.r2.dev/GTAVietUpdate.exe", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772433195, "uuid": "b15d349d-1601-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.231.59.27:47011/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772433374, "uuid": "1c26a015-1602-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.244.128:44424/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772433374, "uuid": "1c350d60-1602-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.148.179:44102/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772433676, "uuid": "d04c0ab9-1602-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.27.96:48199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434085, "uuid": "c450e14a-1603-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.215.60.5:8084/dick.sh", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434086, "uuid": "c4dd55cf-1603-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://visual.trueblog.sbs/Visual%20Studio.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "c51b1a98-1603-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/5z1bep0pjw?token=jukDt3BlreIW0LfiSuS5B2ERVrpsnL7w", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "c51b5505-1603-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/8cb7qpuydx?token=jukDt3BlreIW0LfiSuS5B2ERVrpsnL7w", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "c52464db-1603-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/8iwks17l9s?token=jukDt3BlreIW0LfiSuS5B2ERVrpsnL7w", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "c52eec4a-1603-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/8mrg3tlpxq?token=jukDt3BlreIW0LfiSuS5B2ERVrpsnL7w", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "c5301e8c-1603-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/dszu1nu093?token=jukDt3BlreIW0LfiSuS5B2ERVrpsnL7w", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "c530710c-1603-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/88296p2ett?token=jukDt3BlreIW0LfiSuS5B2ERVrpsnL7w", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434087, "uuid": "c5403059-1603-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/p90pnmk3dou1ukg2t69f1/KitsuCraftLauncher.exe?rlkey=fczq9wlhnowjllb8ia027a6k6&st=269uhvbv&dl=1", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "MicroStealer", "colour": "#29ee34", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434088, "uuid": "c594df5f-1603-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://loader-400.pages.dev/MRX/FreeFortniteCheat.zip", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "pw-123", "colour": "#ec515f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434095, "uuid": "ca0a4c72-1603-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.80/x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434120, "uuid": "d92d8df4-1603-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.67.34:34130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434147, "uuid": "e8c3aeb0-1603-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/as1kxl6nr8?token=jukDt3BlreIW0LfiSuS5B2ERVrpsnL7w", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434149, "uuid": "e9ef22c9-1603-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.92.231/Hisefuhu", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434336, "uuid": "59d9a9ef-1604-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.245.42.243:41159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434516, "uuid": "c5112d86-1604-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.27.96:48199/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434517, "uuid": "c57e2f91-1604-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.26.95:53085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434627, "uuid": "073c2727-1605-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.164.232:42072/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772434996, "uuid": "e2e14459-1605-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.148.179:44102/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772435051, "uuid": "03c1ce93-1606-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.19.92:47775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772435175, "uuid": "4dc2b9b9-1606-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.5.142.71:58634/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772435594, "uuid": "4791287e-1607-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.153.189:39520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772435890, "uuid": "f7a80acf-1607-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.245.42.243:41159/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772435890, "uuid": "f828a5ac-1607-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.1.78:36724/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772436250, "uuid": "ce803150-1608-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.196.142:59787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772436375, "uuid": "18b4e6fe-1609-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.196.142:59787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772436438, "uuid": "3e6da43a-1609-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.167.136:51930/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772436556, "uuid": "8521ae70-1609-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.84.134:38734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772436609, "uuid": "a48a6969-1609-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://20t2lqnx.grosstable.digital/?=check&&actmn=iGiakZrubIPGLzie", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772437940, "uuid": "bdacbbaf-160c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.84.134:38734/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772437987, "uuid": "d99baaff-160c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.200/tmp/pipe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772437991, "uuid": "dc4c332b-160c-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.200/tmp/beben.pdf", "Tag": [ { "name": "Arechclient2", "colour": "#1b320a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772438238, "uuid": "6f8014e1-160d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.167.136:51930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772438659, "uuid": "6aa8a159-160e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.149.130:41310/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772439141, "uuid": "89dee87b-160f-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.29:54279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772439751, "uuid": "f5219a2f-1610-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.138.12:44175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772440221, "uuid": "0d2f6c1e-1612-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.152.170:42309/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772440460, "uuid": "9be552cd-1612-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.120.10:47713/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442547, "uuid": "780a7bd0-1617-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://wpc99gxs.immunizeoot.digital/?=check&&actmn=xjZILzOHLnBFWfpQ", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442559, "uuid": "7f23e67e-1617-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:55008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442731, "uuid": "e5aa95e3-1617-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://2ts-engineering.by/?cfcw_captcha_page=1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442732, "uuid": "e615af61-1617-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.219.23.145/wobbling-twitter", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442786, "uuid": "0678b599-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://wormteste.shop/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442787, "uuid": "06955742-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://separadordecc.com/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442787, "uuid": "0707f4dd-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://ia600103.us.archive.org/26/items/optimized_msi_20260126_1029/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442788, "uuid": "07426924-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/tropa-14f0e.appspot.com/o/MSI_PRO_with_b64.png?alt=media&token=e0e091d3-b9b4-4781-a64c-44688f073ae4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442788, "uuid": "077d0fd4-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://coralasargetia.ro/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442791, "uuid": "097fd6e4-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/anyaa-7c774.firebasestorage.app/o/0.0_MSI.png?alt=media&token=224f5f22-5377-4a28-86d8-746ec3ffdabd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442792, "uuid": "09b96603-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/anyaa-7c774.firebasestorage.app/o/tucu1.png?alt=media&token=1920548c-be4e-47ac-86d9-f975034c24e7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442792, "uuid": "09ea5634-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/anyaa-7c774.firebasestorage.app/o/seba.png?alt=media&token=93d4584d-ac8c-42ff-b7b0-26d859f0197f", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442792, "uuid": "09ea7020-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/anyaa-7c774.firebasestorage.app/o/toto1.png?alt=media&token=aa683698-53b7-4927-bf97-84f1639b5cda", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442792, "uuid": "09fdeb0b-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/anyaa-7c774.firebasestorage.app/o/wowow1.png?alt=media&token=69f4a496-8bf1-4a7c-b3e5-d6cbb4040a0a", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442793, "uuid": "0a46de85-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/anyaa-7c774.firebasestorage.app/o/adst.png?alt=media&token=1b9eeb56-f64c-408e-9d7c-e117bff677a3", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442793, "uuid": "0a4bca60-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/anyaa-7c774.firebasestorage.app/o/img_optimized_MSI.png?alt=media&token=c308e6bd-473a-4961-8306-1293ef430349", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442793, "uuid": "0a4bf3ec-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/anyaa-7c774.firebasestorage.app/o/cr7.png?alt=media&token=aa685aba-4c75-4b89-b8f0-ff3a2da75823", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442793, "uuid": "0a5fd70a-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/anyaa-7c774.firebasestorage.app/o/fuckoff.png?alt=media&token=8f3e360a-7d2b-47ff-bf9e-6d560c0f0ee4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442794, "uuid": "0ad4ebac-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://chungminhtaichinhsaigon.net/components/com_media/m1vebzk/jt1wulk/wxhmvac/new/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772442802, "uuid": "0f87bd7e-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://bafybeig5e7vfagk6xs4b2kk6s2bgaqm4trr56whisnhzirxutlovqkcnli.ipfs.dweb.link/?filename=optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772443040, "uuid": "9de5f0ac-1618-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.129:57178/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772443334, "uuid": "4d2be213-1619-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.44:54795/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772443507, "uuid": "b42dded4-1619-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://archive.org/download/0225-r/0225R.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772443508, "uuid": "b4793d5a-1619-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/anyaa-7c774.firebasestorage.app/o/imges.png?alt=media&token=25fe508e-8ba9-4d1f-a6f1-b853cedb64ae", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772443508, "uuid": "b4a6f282-1619-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.197:5124/1/pp1/nsjd.png/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772443512, "uuid": "b71e714d-1619-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://firebasestorage.googleapis.com/v0/b/tropa-14f0e.appspot.com/o/MSI_PRO_with_b64.png?alt=media&token=57781f14-c689-48cf-abec-fa2f33a56f0d", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772443519, "uuid": "bb3f883a-1619-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.36:42675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772443523, "uuid": "bd537bc8-1619-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://ia902805.us.archive.org/33/items/0225-r/0225R.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772443822, "uuid": "6fb6b85d-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:55008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772443868, "uuid": "8b399d65-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.208:39881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444049, "uuid": "f6fed1d2-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.122.211.138:31644/02.08.2022.exe", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444049, "uuid": "f74a0345-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.249.64.233:45745/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444050, "uuid": "f780b65d-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.164/armv6l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444050, "uuid": "f7ae84c4-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://dorofeev200.ucoz.ua/_ld/4/451_kwaak3_arena_v0.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444050, "uuid": "f7ca931a-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_211250_20260302_001250_1L27D11M9XG3.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444050, "uuid": "f7dd0861-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.fatalgame.com/files/2315.rar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444051, "uuid": "f7f997e9-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.125.163.10:7080/02.08.2022.exe", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444052, "uuid": "f90afe51-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_191602_20260301_221601_25FHH24SL1N4.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444052, "uuid": "f90b52d7-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_210513_20260302_000512_764YBUVPGO35.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444053, "uuid": "f99f1669-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://connexion.synology.me/AD325WN-AEG._B.53(3471).exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444055, "uuid": "faa9465d-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_213725_20260302_003724_D1GEBII0G0S7.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444056, "uuid": "fb5018e6-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://miryyjn.com/%E7%83%9F%E9%9B%A8%E6%B1%9F%E5%8D%97.rar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444057, "uuid": "fbb028e5-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_212249_20260302_002248_V855Y0CW3LA8.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444057, "uuid": "fbde857e-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://stonebet88.games/aplikasi/Stonebet88.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444058, "uuid": "fc6d4c1f-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://tikuprivate-uz.sbs/TikTok18.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444059, "uuid": "fd0cabe8-161a-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://play-store-livechat-iifiufdasksai07235wief41344332i2j381ge.pages.dev/Live%20Chat.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444065, "uuid": "004c9b6f-161b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://84.234.99.21/i-5.8-6.Sakura", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444074, "uuid": "06206a13-161b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://df1113.qmpqcv83.work/android/aaseoy_1.2.4/aaseoy_1.2.4_82544757.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444075, "uuid": "06733762-161b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://da1113.0r6ecdax.work/android/aaseoy_2.2.6/aaseoy_2.2.6_82375752.apk", "Tag": [ { "name": "SpyLoan", "colour": "#E515C8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444089, "uuid": "0f16f78c-161b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://onesevenonenine.oss-us-east-1.aliyuncs.com/win32-chrome.zip", "Tag": [ { "name": "Malgent", "colour": "#a071f9", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#2b8df4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444098, "uuid": "144e385c-161b-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-ddc283035a91433f85755edb9a06e562.r2.dev/Mirco_Teams.exe", "Tag": [ { "name": "DattoRMM", "colour": "#167832", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444951, "uuid": "10726f0c-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7180287117/4HsuMcy.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444962, "uuid": "173431d0-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.9.197:54172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444962, "uuid": "174346d5-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.92:40387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444962, "uuid": "175c113b-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.33.74:52903/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444963, "uuid": "17cfdb52-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.22.69:41264/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772444980, "uuid": "2228f429-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.112.63:59368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445027, "uuid": "3dbc19f5-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.44:54795/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445027, "uuid": "3dcb3802-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.171.31:59818/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445027, "uuid": "3de4bb1d-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.129:57178/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445027, "uuid": "3e37a7fb-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.87.230:44072/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445312, "uuid": "e7c44ad3-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_193412_20260301_223411_25FHH24SL1N4.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445312, "uuid": "e7c45076-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_195043_20260301_225043_25FHH24SL1N4.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445312, "uuid": "e7c475fa-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_200736_20260301_230736_25FHH24SL1N4.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445312, "uuid": "e7f33722-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_195928_20260301_225928_25FHH24SL1N4.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445312, "uuid": "e8087954-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_192234_20260301_222232_25FHH24SL1N4.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445312, "uuid": "e81648c3-161d-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_190144_20260301_220011_602S70WU84QT.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445371, "uuid": "0af165f5-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_201936_20260301_231936_25FHH24SL1N4.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445373, "uuid": "0bfd8abf-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_215034_20260302_005033_6307898K735P.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445373, "uuid": "0c15470f-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_221904_20260302_011904_VCRFO395G4T0.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445373, "uuid": "0c7cf9c0-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_222925_20260302_012925_A0BJWCC0D0OJ.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445374, "uuid": "0ca41bf9-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_192912_20260301_222912_25FHH24SL1N4.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445374, "uuid": "0cafd3a3-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260302_084454_20260302_114454_A8G6P91V3T19.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445378, "uuid": "0f6cd148-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_211859_20260302_001848_84ZGXUXTQ768.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445379, "uuid": "0f98b267-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_211045_20260302_001044_W5544DL511V7.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445379, "uuid": "0fce2278-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_204012_20260301_234011_25FHH24SL1N4.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445379, "uuid": "0fdebd46-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_204919_20260301_234918_25FHH24SL1N4.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445379, "uuid": "0ff69cbd-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260302_042758_20260302_072757_RS7C78N05622.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445380, "uuid": "107eeb55-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260302_084943_20260302_114940_VZS565083201.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445380, "uuid": "108a18d8-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_222357_20260302_012356_6P969WT155ZD.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445380, "uuid": "10a834d3-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_214251_20260302_004251_81ZEH0M339B2.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445381, "uuid": "10c2ba2a-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_205110_20260301_235109_25FHH24SL1N4.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445381, "uuid": "10c40f32-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_215304_20260302_005303_9NI9Y5TKX1CK.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445381, "uuid": "10c41270-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260302_043438_20260302_073437_6831C3YYXI68.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445381, "uuid": "10c434bc-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_222749_20260302_012748_D5G9657V24UP.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445381, "uuid": "10dcc4e9-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_213435_20260302_003434_0X184H8TF22O.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445381, "uuid": "10dcd7fe-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_211527_20260302_001527_50M237Y8914D.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445381, "uuid": "10ddbd77-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260302_084145_20260302_114144_9EZN7733W1Z3.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445381, "uuid": "111d732e-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_202807_20260301_232806_25FHH24SL1N4.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772445382, "uuid": "11611709-161e-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_210845_20260302_000837_G7147ZVV9911.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772446328, "uuid": "4556bf3b-1620-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://free-imgislropw.icu/files/20260301_210107_20260302_000106_1Y4U460547CC.exe", "Tag": [ { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772446340, "uuid": "4c6f78dd-1620-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.249.64.233:45745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772446340, "uuid": "4c7199a9-1620-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.9.197:54172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772446340, "uuid": "4c7e6b46-1620-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.112.63:59368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772446340, "uuid": "4c833b57-1620-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.208:39881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772446340, "uuid": "4ce15a1f-1620-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.99.89:54092/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772446341, "uuid": "4cf4885d-1620-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.74.135:45752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772446630, "uuid": "f9b40488-1620-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.226.161.90:55355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772446698, "uuid": "22070bb0-1621-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.87.230:44072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772446870, "uuid": "8866415a-1621-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.74.135:45752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772446990, "uuid": "cffec1d4-1621-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.112:41368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772447249, "uuid": "6a42a835-1622-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "https://dnvigv97.comedianmental.digital/?=check&&actmn=elCDluAKDOztCEGr", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772447329, "uuid": "9a21eabf-1622-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.112:41368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772447783, "uuid": "a895e5ab-1623-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.92.231/Verification", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772447890, "uuid": "e8a2517f-1623-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.antimalwarehub.com/Verification", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772447891, "uuid": "e8cbaed6-1623-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://antimalwarehub.com/Verification", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772447893, "uuid": "ea22ee15-1623-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://antimalwarehub.com/Hisefuhu", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772447895, "uuid": "eb2e9756-1623-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.antimalwarehub.com/Hisefuhu", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "macho", "colour": "#1a7c59", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448038, "uuid": "407f66ca-1624-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.99.89:54092/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448086, "uuid": "5d771e7c-1624-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.45.201:37055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448573, "uuid": "7f96dadc-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.164/armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448573, "uuid": "7f96de1c-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.164/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448573, "uuid": "7f96dfb5-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.164/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448574, "uuid": "80047ba7-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.173.150:52531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448628, "uuid": "a079afa8-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.164/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448628, "uuid": "a079b130-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.164/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448628, "uuid": "a079e2e2-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.164/i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448628, "uuid": "a079f86e-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.164/powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448682, "uuid": "c07a0413-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.164/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448683, "uuid": "c0eeb63b-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.164/armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448743, "uuid": "e526af30-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.164/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448744, "uuid": "e5b15d2a-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://objective-roentgen.121-127-34-164.plesk.page/armv6l", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448745, "uuid": "e5cc6b62-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://affectionate-easley.121-127-34-164.plesk.page/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448745, "uuid": "e63c7537-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://objective-roentgen.121-127-34-164.plesk.page/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448748, "uuid": "e7b33388-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://objective-roentgen.121-127-34-164.plesk.page/i586", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448751, "uuid": "e9e4b100-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://affectionate-easley.121-127-34-164.plesk.page/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448752, "uuid": "ea1ff8df-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://objective-roentgen.121-127-34-164.plesk.page/m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448752, "uuid": "ea225375-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://affectionate-easley.121-127-34-164.plesk.page/i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448752, "uuid": "ea228903-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://affectionate-easley.121-127-34-164.plesk.page/powerpc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448752, "uuid": "ea23ac75-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://affectionate-easley.121-127-34-164.plesk.page/armv4l", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448752, "uuid": "ea3240ea-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://objective-roentgen.121-127-34-164.plesk.page/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448752, "uuid": "ea347a4e-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://affectionate-easley.121-127-34-164.plesk.page/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448752, "uuid": "ea34c0fb-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://affectionate-easley.121-127-34-164.plesk.page/armv5l", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448752, "uuid": "ea34ebeb-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://affectionate-easley.121-127-34-164.plesk.page/mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448752, "uuid": "ea354a98-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://objective-roentgen.121-127-34-164.plesk.page/powerpc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448752, "uuid": "ea3e6e60-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://objective-roentgen.121-127-34-164.plesk.page/armv5l", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448752, "uuid": "ea418340-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://affectionate-easley.121-127-34-164.plesk.page/armv6l", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448752, "uuid": "ea41ef7c-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://affectionate-easley.121-127-34-164.plesk.page/i586", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448752, "uuid": "ea4b7b11-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://objective-roentgen.121-127-34-164.plesk.page/i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448752, "uuid": "ea67a138-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://objective-roentgen.121-127-34-164.plesk.page/armv4l", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772448753, "uuid": "eac46d4d-1625-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://objective-roentgen.121-127-34-164.plesk.page/x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772449630, "uuid": "f5594794-1627-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.78:40886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772449630, "uuid": "f59a3bd1-1627-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.100.74:45317/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772449631, "uuid": "f5e83919-1627-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.56.23:55573/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772449639, "uuid": "fad12c2c-1627-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://objective-roentgen.121-127-34-164.plesk.page/mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772449639, "uuid": "fad4daa6-1627-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://affectionate-easley.121-127-34-164.plesk.page/sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772449642, "uuid": "fcd4bd32-1627-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.175.74:53487/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772450000, "uuid": "d1edcb4a-1628-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.173.150:52531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772450000, "uuid": "d265de9e-1628-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.160.141.81:44828/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772450064, "uuid": "f86599e3-1628-11f1-8b52-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.223.97.76:3904/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772450470, "uuid": "ea42a520-1629-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7725193537/BTCWtnO.exe", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772450536, "uuid": "11d79527-162a-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.175.74:53487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772450537, "uuid": "12414960-162a-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.100.74:45317/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772451260, "uuid": "c14505c5-162b-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.26.48:52873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772451314, "uuid": "e127d1ba-162b-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7725193537/jdVAN80.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772451620, "uuid": "97744ece-162c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.160.141.81:44828/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772451909, "uuid": "4442a4a6-162d-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.182.193:29871/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452275, "uuid": "1e2f3544-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.71.127:52039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452394, "uuid": "650f5756-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.11:40363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452394, "uuid": "6519a7c0-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.78:40886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452509, "uuid": "a9c55de2-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.54.153.177/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ac635296-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.54.153.177/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ac6c7313-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.54.153.177/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ac6c8b95-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.54.153.177/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ac6fb3b0-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.54.153.177/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ac77ef9d-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.54.153.177/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ac7de4df-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.54.153.177/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ac80f4a1-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.54.153.177/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ac81032f-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.54.153.177/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ac83f03b-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.54.153.177/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ac85a944-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.54.153.177/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ac8e07f2-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.54.153.177/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ac8e3462-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.54.153.177/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "ac91b58a-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.54.153.177/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452514, "uuid": "aca7037a-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.54.153.177/m4ng0d33w1771nnmnlove/MMaaRRiiOisecTanee.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452515, "uuid": "acf0cf5e-162e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.95.5:46568/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772452754, "uuid": "3bc2d873-162f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.231.129:37727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772453045, "uuid": "e8fa92a3-162f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.176.231/3.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772453046, "uuid": "e9c5dc1c-162f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.176.231/22/e/ec.hta", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772453049, "uuid": "eb558964-162f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.176.231/21/f9sd9fd0809g7sd8f789g73438g97dsf8g798s7df98g.js", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772453049, "uuid": "eb97a84d-162f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.176.231/22/9sd9fd0809g7sd8f789g73438g97dsf8g798s7df98g.js", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772453067, "uuid": "f6695bce-162f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.101.209:54378/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772453167, "uuid": "320f7791-1630-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.95.5:46568/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772453480, "uuid": "ec60f820-1630-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.121.79:38495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772453480, "uuid": "ec61b40e-1630-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.228.117:38242/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772454438, "uuid": "27810dcb-1633-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.244.53:43955/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772454978, "uuid": "69298eaf-1634-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.228.117:38242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772454993, "uuid": "71ecdbf6-1634-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.110.141:38560/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772455512, "uuid": "a7ab8d4a-1635-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.208.63:48584/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772455701, "uuid": "17e77f12-1636-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.181.158.75:46265/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772456346, "uuid": "98b1820e-1637-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://ej41ykw1.slobodaspang.digital/?=check&&actmn=kGGuOJLUHneahMsE", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772457319, "uuid": "dc66c35f-1639-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.253.136:32803/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458097, "uuid": "ac10e61c-163b-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.181.158.75:46265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458353, "uuid": "450cd0a3-163c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.237.65:45856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458399, "uuid": "60184e9a-163c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.111.149:60331/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458446, "uuid": "7c5d5e6e-163c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://store-na-phx-5.gofile.io/download/web/0c438ce1-37d8-4869-95e1-77723bf8df42/INSTALL.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458688, "uuid": "0c5dfabb-163d-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://wpgbf1zg-5500.euw.devtunnels.ms/loader/RANKUP/FREE/FreeFortniteCheat.zip", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "pw-123", "colour": "#ec515f", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772458688, "uuid": "0c736a3c-163d-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://wpgbf1zg-5500.euw.devtunnels.ms/loader/RANKUP/FREE/FreeFortniteCleaner.zip", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "pw-123", "colour": "#ec515f", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459003, "uuid": "c89812cb-163d-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.153.84:32877/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459053, "uuid": "e6099ee6-163d-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.93.252:38077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772459054, "uuid": "e6a9641b-163d-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.88.217:34154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460027, "uuid": "2a68d6d6-1640-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.82.78:34164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460082, "uuid": "4baed04a-1640-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.237.65:45856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460142, "uuid": "6f64281e-1640-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.172.46:58752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460384, "uuid": "ff45f09a-1640-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.167.205:41521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460440, "uuid": "20e12d6c-1641-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.8.47:41491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772460990, "uuid": "68c5102f-1642-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.230.73:50595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772461223, "uuid": "f3cded32-1642-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.233.30:48367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772461230, "uuid": "f7cfcd6b-1642-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.88.217:34154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772461401, "uuid": "5dbde331-1643-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.172.46:58752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772461512, "uuid": "9f984ea2-1643-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.219.117:60110/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772461581, "uuid": "c8b7e37b-1643-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.10.237:48140/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772461753, "uuid": "2f91fdce-1644-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.167.205:41521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772461939, "uuid": "9e849bdf-1644-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.36:42675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772462048, "uuid": "df41933d-1644-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://h977pm9s.judaspapal.digital/?=check&&actmn=QcDVSNuQjmnQsMDN", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772462306, "uuid": "78ca3d0c-1645-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.247.108:49090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772462960, "uuid": "ff0be21f-1646-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.219.117:60110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463326, "uuid": "d936a8ce-1647-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.174.83:44037/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463498, "uuid": "3f8cdf0a-1648-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.144.60:55399/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463789, "uuid": "ed49fcc1-1648-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://whovcs.com/at.7z", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "pw-ppp", "colour": "#87E9B2", "exportable": true, "hide_tag": false }, { "name": "pwn-ppp", "colour": "#e69937", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463802, "uuid": "f4a7369f-1648-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.247.108:49090/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772463849, "uuid": "10e6424e-1649-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://nobovcs.com/at.7z", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "pw-ppp", "colour": "#87E9B2", "exportable": true, "hide_tag": false }, { "name": "pwn-ppp", "colour": "#e69937", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772465184, "uuid": "2c3a7214-164c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.220.199:42097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772465184, "uuid": "2cad3471-164c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.93.62:49355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772465360, "uuid": "959131af-164c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.220.199:42097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772466078, "uuid": "41a7fb9e-164e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.93.62:49355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772466677, "uuid": "a6ac6413-164f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.61:54241/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772466800, "uuid": "ef6e419c-164f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.193.10:46709/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467387, "uuid": "4d950852-1651-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:29948/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467446, "uuid": "70ff6c9b-1651-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://id8965.com/bot.exe", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467446, "uuid": "70ff6d34-1651-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://id8965.com/s.exe", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467447, "uuid": "71256ec0-1651-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://id8965.com/Loader.exe", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467447, "uuid": "712d1bc1-1651-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://id8965.com/2.exe", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467447, "uuid": "712d521c-1651-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://id8965.com/4.exe", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467449, "uuid": "7270ef81-1651-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://id8965.com/3.exe", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467449, "uuid": "728219f6-1651-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://id8965.com/1.exe", "Tag": [ { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772467571, "uuid": "bb5f4488-1651-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.222.167.30:48382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772468110, "uuid": "fc3c4cac-1652-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.231.129:37727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772468529, "uuid": "f6211863-1653-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7006569639/ZW3baFu.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772468898, "uuid": "d281bc02-1654-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.240.105:58397/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772469069, "uuid": "38685a84-1655-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://njpv91f5.eighteenshuga.digital/?=check&&actmn=sOXQJKvpdptxketg", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772469071, "uuid": "391cbc61-1655-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://katz.adv.br/dhl/PO-453002.bat", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772469079, "uuid": "3dd06c5a-1655-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://katz.adv.br/dhl/AWB-202625021.scr", "Tag": [ { "name": "SimpleHelp", "colour": "#C609B5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772469092, "uuid": "45c2c4f1-1655-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://katz.adv.br/dhl/docs5647001.scr", "Tag": [ { "name": "SimpleHelp", "colour": "#C609B5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772469495, "uuid": "3624fe24-1656-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.185:41355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772469667, "uuid": "9c8806d7-1656-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://katz.adv.br/po/PO345657.exe", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772469667, "uuid": "9cce45a2-1656-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://katz.adv.br/po/PO978600.zip", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772469669, "uuid": "9dad7bc1-1656-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://katz.adv.br/po/EmscoIpEjfgFrxV.exe", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772469669, "uuid": "9dfca21d-1656-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://katz.adv.br/po/PO978600.exe", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772469670, "uuid": "9e2555f8-1656-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://katz.adv.br/po/PO-453002.bat", "Tag": [ { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772469677, "uuid": "a2815c8b-1656-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://katz.adv.br/po/Docu980432.scr", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SimpleHelp", "colour": "#C609B5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772470042, "uuid": "7c39eb4f-1657-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.240.105:58397/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772470154, "uuid": "be91788d-1657-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.147:44417/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772470278, "uuid": "08eee60f-1658-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.26.117:39858/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772470450, "uuid": "6f576edd-1658-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.kernelservices.eu/download/Loader.exe", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772470581, "uuid": "bd18d451-1658-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.147:44417/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772471239, "uuid": "457b4c96-165a-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.89.21:58614/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772471255, "uuid": "4ecde969-165a-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://download.rajpurohitdairyy.in/5280_9912.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772471349, "uuid": "8707a84a-165a-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:27347/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772471838, "uuid": "aa62da15-165b-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.23.159:55365/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772472127, "uuid": "570cf632-165c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:53861/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772472380, "uuid": "edc1d63c-165c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.3.41:34188/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772472668, "uuid": "9929fb64-165d-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.26.117:39858/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772473396, "uuid": "4b0a7a3c-165f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.29.8:43346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772473570, "uuid": "b2d140e9-165f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://ni3h0x2y.gastronsyriansky.digital/?=check&&actmn=paSOkibjCXZvoDAh", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772473570, "uuid": "b2f82aac-165f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.187.220:41861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772473571, "uuid": "b34ea834-165f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.23.159:55365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772473630, "uuid": "d6d38234-165f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.11:40363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772473815, "uuid": "44ee1b2d-1660-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.45.94:50554/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772474062, "uuid": "d87462d5-1660-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://download.rajpurohitdairyy.in/Job%20Description&Salary%20Range.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772474066, "uuid": "daad70b3-1660-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "https://download.rajpurohitdairyy.in/Job%20Description.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772474077, "uuid": "e1577aae-1660-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.231:34336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "52693f96-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "5271a84e-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "5271aeb0-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "5271b175-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "5271b5d5-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "5271be19-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "5271c164-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "5271c7d3-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "5271d00b-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "527282c5-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "527bec03-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/debug", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "528a48e9-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "528a70ab-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475556, "uuid": "52928a17-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475611, "uuid": "736df20a-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772475615, "uuid": "75e9236e-1664-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.208.247.237/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476113, "uuid": "9e8292a0-1665-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.106.117:46073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476156, "uuid": "b86eb070-1665-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.166/m-p.s-l.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476157, "uuid": "b8ee45d4-1665-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.166/a-r.m-4.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476157, "uuid": "b8fe99fa-1665-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.166/Sakura.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476158, "uuid": "b976d97e-1665-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.166/m-i.p-s.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476158, "uuid": "b982c8b0-1665-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.166/x-3.2-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476158, "uuid": "b99991ce-1665-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.166/s-h.4-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476158, "uuid": "b99d5a30-1665-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.166/a-r.m-5.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476160, "uuid": "baa21f90-1665-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.166/a-r.m-6.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476160, "uuid": "bacdde34-1665-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.166/p-p.c-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476162, "uuid": "bbd75814-1665-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.166/x-8.6-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476162, "uuid": "bbf8292e-1665-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.166/i-5.8-6.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476164, "uuid": "bd029d33-1665-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.166/m-6.8-k.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476216, "uuid": "dc401540-1665-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://80.71.224.166/a-r.m-7.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476519, "uuid": "90a7c87a-1666-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.176.255:59357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476638, "uuid": "d7940d76-1666-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.170.33:42372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476697, "uuid": "fb06912f-1666-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.180.188:39473/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772476819, "uuid": "439547b0-1667-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.20.62:43062/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772477837, "uuid": "a20a611f-1669-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.20.62:43062/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772478019, "uuid": "0ec17403-166a-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.176.255:59357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772478188, "uuid": "7363a0b6-166a-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:8517/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772478258, "uuid": "9cefe477-166a-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.170.33:42372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772479091, "uuid": "8d89f1fe-166c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/2108618161/Z1Cai5W.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772479100, "uuid": "92d86652-166c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.139.52:47883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772480681, "uuid": "41298690-1670-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.248.80.216:33422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772480902, "uuid": "c519ea41-1670-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.67:52816/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772481265, "uuid": "9d875be4-1671-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.200:58978/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772481309, "uuid": "b7995a0e-1671-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5532726588/cPr84lu.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772481981, "uuid": "487ba989-1673-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.123.125:42546/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772482100, "uuid": "8f6742a5-1673-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.200:58978/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772482164, "uuid": "b552cc8c-1673-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.54.250:34912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772482273, "uuid": "f64c1eb9-1673-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.248.80.216:33422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772482462, "uuid": "6725f42a-1674-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:38029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772482462, "uuid": "67416682-1674-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.67:52816/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772482762, "uuid": "19bcf39d-1675-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.249.58:43252/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772483296, "uuid": "57e708d3-1676-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.129.242:54352/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772483296, "uuid": "585d1c35-1676-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.97.27:47018/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772483357, "uuid": "7cb6f9a7-1676-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.3.214:49216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772483661, "uuid": "31caf11c-1677-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.54.250:34912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772483899, "uuid": "bf4922ef-1677-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.140:49026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772484079, "uuid": "2af2f102-1678-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:38029/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772484261, "uuid": "9757eb3c-1678-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.53.92:46581/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772484312, "uuid": "b563fd53-1678-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.249.58:43252/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772484646, "uuid": "7c7d5f5e-1679-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.165.20:56499/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772484804, "uuid": "db0017e0-1679-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.3.214:49216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772485461, "uuid": "62ad28fb-167b-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.140:49026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772485822, "uuid": "396a5c9d-167c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.165.204:45841/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772485945, "uuid": "82f77653-167c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.169.9:40212/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772486182, "uuid": "1013be01-167d-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.228.201:54410/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772486299, "uuid": "55fa7bff-167d-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.165.20:56499/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772486598, "uuid": "085eba97-167e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.42.40:59531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772486728, "uuid": "55c53656-167e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.237.28.235:13877/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772486829, "uuid": "91d3c1e1-167e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:6187/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772486832, "uuid": "93adf4a6-167e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.22.178:55276/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772486947, "uuid": "d7fdcb13-167e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.68.109.50/MMaaRRiiOisecTanee/MMaaRRiiOisecTanee.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487135, "uuid": "487842d0-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.165.204:45841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487312, "uuid": "b1d2101d-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.42.40:59531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487313, "uuid": "b24a2216-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.169.9:40212/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487367, "uuid": "d2691ce2-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/w.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487367, "uuid": "d27cf108-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/wget.sh", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487370, "uuid": "d45d3e45-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/bins/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487370, "uuid": "d465a1a9-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/bins/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487370, "uuid": "d476364a-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/bins/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487370, "uuid": "d4764153-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/bins/arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487370, "uuid": "d47f4118-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/bins/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487370, "uuid": "d47f53a2-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/bins/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487370, "uuid": "d47f82c6-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/bins/arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487370, "uuid": "d482fcbb-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/bins/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487370, "uuid": "d486942a-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/bins/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487370, "uuid": "d486a10c-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/bins/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487370, "uuid": "d494fc1a-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487372, "uuid": "d54c0273-167f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.74.6.14/bins/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772487848, "uuid": "f1337da4-1680-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:43307/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772488509, "uuid": "7b192eca-1682-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:49301/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772488519, "uuid": "8161e101-1682-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.22.178:55276/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772490072, "uuid": "1ebed010-1686-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.183.46.3/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772490384, "uuid": "d8cbd546-1686-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:44038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772490975, "uuid": "391b59de-1688-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.64.33.107/files/torrent.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772491931, "uuid": "72e22a9e-168a-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.221.248:36422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772491950, "uuid": "7e0a8caf-168a-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.178.186:48637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772491992, "uuid": "9725a6cf-168a-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.201.90.84:50595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772492297, "uuid": "4d5a4587-168b-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.249.62.160:54093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772492419, "uuid": "95b3b740-168b-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.105.87:36179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772492482, "uuid": "bb1d46c4-168b-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.127.84:53528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772492482, "uuid": "bb874cc4-168b-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.223.205:60812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772492594, "uuid": "fde24c57-168b-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:44038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772492949, "uuid": "d1a2690a-168c-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.198.83:49120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772493130, "uuid": "3d799c10-168d-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.82.78:34164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772493311, "uuid": "a9c265f9-168d-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.88.119:42218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772493428, "uuid": "eefc0898-168d-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:11981/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772493563, "uuid": "3fe8f136-168e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.42.142:58484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772493857, "uuid": "eef2b3ef-168e-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.249.62.160:54093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772494102, "uuid": "80c430f7-168f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.223.205:60812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772494279, "uuid": "ea639018-168f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.248:49075/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772494279, "uuid": "ea79bef1-168f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.32.175:38579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772494279, "uuid": "eaaee2c9-168f-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.184.121:43547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772494578, "uuid": "9c79bc88-1690-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.90.94:57028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772494720, "uuid": "f13d4595-1690-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.119.157:43635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772494764, "uuid": "0b659761-1691-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.88.34:56735/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772495179, "uuid": "02e54ec5-1692-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.90.94:57028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772495304, "uuid": "4d6f8b92-1692-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.119.157:43635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772495307, "uuid": "4f003c75-1692-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.127.82:36090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772495423, "uuid": "944ad5c2-1692-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.24.251:36786/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772495767, "uuid": "616679b3-1693-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.248:49075/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772495948, "uuid": "cd504777-1693-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.111.149:60331/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772495948, "uuid": "cd505e79-1693-11f1-87c8-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.184.121:43547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452507, "uuid": "a8941953-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.54.153.177", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434085, "uuid": "c3bfaf53-1603-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.67.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772431446, "uuid": "9eca38ce-15fd-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.231.59.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772432164, "uuid": "4b1bf976-15ff-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.63.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444947, "uuid": "0e1e6923-161d-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.112.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772491925, "uuid": "6f75048d-168a-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.178.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772409664, "uuid": "e83c5ee5-15ca-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.191.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772484606, "uuid": "652925f8-1679-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.252.165.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772439726, "uuid": "e643c07d-1610-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.138.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434506, "uuid": "bf37a557-1604-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.26.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772428025, "uuid": "a81748fe-15f5-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.195.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772426884, "uuid": "001fcc2f-15f3-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.153.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772476625, "uuid": "cfa4b5a2-1666-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.170.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772485926, "uuid": "7794b9f8-167c-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.169.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772480645, "uuid": "2c073887-1670-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.248.80.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772495285, "uuid": "42278e08-1692-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.127.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416985, "uuid": "f3a6e217-15db-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.167.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463306, "uuid": "cd2f7c2f-1647-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.174.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772486825, "uuid": "8f90badd-167e-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.22.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772433125, "uuid": "88169724-1601-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.185.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772422384, "uuid": "85b574b2-15e8-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.24.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772433668, "uuid": "cb43f6eb-1602-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.248.27.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772483285, "uuid": "51406a09-1676-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.129.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458325, "uuid": "34638012-163c-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.186.237.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444045, "uuid": "f4f4db83-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.127.34.164", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-get", "colour": "#766bc0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460125, "uuid": "65452fad-1640-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.172.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772449627, "uuid": "f3bf0124-1627-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.175.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452745, "uuid": "361d67a3-162f-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.231.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772446326, "uuid": "440507be-1620-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.99.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444947, "uuid": "0e1e4675-161d-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.22.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772494266, "uuid": "e282518a-168f-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.184.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772427125, "uuid": "8f686929-15f3-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.53.111.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772412964, "uuid": "96b3372d-15d2-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.0.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772461507, "uuid": "9cf0e17e-1643-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.219.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772454426, "uuid": "1ff58adc-1633-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.244.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772494266, "uuid": "e2825ee2-168f-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.32.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460966, "uuid": "5a68d006-1642-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.230.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772470265, "uuid": "010a501f-1658-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.95.26.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772449995, "uuid": "cf0eeed0-1628-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.160.141.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772481965, "uuid": "3e9a7e2e-1673-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.123.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772428685, "uuid": "312a378f-15f7-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.153.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772472366, "uuid": "e54da308-165c-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.3.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772432885, "uuid": "f8c3a88e-1600-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.8.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772453464, "uuid": "e2a328e2-1630-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.228.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772492465, "uuid": "b1428742-168b-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.223.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434146, "uuid": "e834cc86-1603-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.92.231", "Tag": [ { "name": "AmosStealer", "colour": "#b58c24", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772486706, "uuid": "488cce4d-167e-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.237.28.235", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772475545, "uuid": "4befda8c-1664-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "173.208.247.237", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772466785, "uuid": "e6bb70dd-164f-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.193.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772483285, "uuid": "51407c49-1676-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.97.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452507, "uuid": "a89786af-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.174.95.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434325, "uuid": "531b522b-1604-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.245.42.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434085, "uuid": "c3c4cdfb-1603-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "181.215.60.5", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772446326, "uuid": "44065f00-1620-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.74.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772495406, "uuid": "8a6dc48e-1692-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.24.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772486586, "uuid": "00d0aa7a-167e-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.42.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772493307, "uuid": "a6d297b7-168d-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.88.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772424845, "uuid": "407e1849-15ee-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.61.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772493544, "uuid": "34854dd2-168e-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.42.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772492407, "uuid": "8e6025ea-168b-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.105.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772435885, "uuid": "f5359e47-1607-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.1.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772453044, "uuid": "e88b84b2-162f-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.3.176.231", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772450052, "uuid": "f11891c3-1628-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "201.223.97.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416925, "uuid": "d008b0f0-15db-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "208.64.33.107", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772436606, "uuid": "a2c5da08-1609-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "20t2lqnx.grosstable.digital" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772449627, "uuid": "f3a01450-1627-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.56.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772436425, "uuid": "36fda615-1609-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.167.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772491984, "uuid": "92b7699f-168a-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.201.90.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772471824, "uuid": "a27ae8f1-165b-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.23.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463485, "uuid": "37b489cf-1648-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.144.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772494685, "uuid": "dcac12fb-1690-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.119.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772476685, "uuid": "f39a7351-1666-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.180.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772465166, "uuid": "21a046c3-164c-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.93.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772411165, "uuid": "66a52fd3-15ce-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.98.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772417045, "uuid": "173589ce-15dc-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.156.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772479085, "uuid": "8a1493d8-166c-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.139.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772411765, "uuid": "cc931e3c-15cf-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.208.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772482745, "uuid": "0fb819f9-1675-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.249.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772440207, "uuid": "04f73b34-1612-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.219.152.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772476099, "uuid": "966b4570-1665-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.106.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772453464, "uuid": "e2a31fe0-1630-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.121.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772459045, "uuid": "e174bde3-163d-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.88.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442725, "uuid": "e1b5fa00-1617-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "2ts-engineering.by" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460008, "uuid": "1f7b96dd-1640-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.69.82.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444046, "uuid": "f50b29d8-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "360uvip.com" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772418906, "uuid": "6c70ad48-15e0-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.153.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416207, "uuid": "23e937b2-15da-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.29.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772454964, "uuid": "612f4918-1634-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.110.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772468884, "uuid": "c9f17f6d-1654-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.240.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772492946, "uuid": "cfc7f28f-168c-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.198.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448558, "uuid": "7692a31e-1625-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.173.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772494565, "uuid": "950461af-1690-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.90.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772413024, "uuid": "bae3dbf4-15d2-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.91.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772482145, "uuid": "aa2d28e9-1673-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.54.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772452266, "uuid": "18c5df8e-162e-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.71.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772458386, "uuid": "588ef914-163c-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.111.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772436545, "uuid": "7e9b7f42-1609-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.84.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416684, "uuid": "4083aa3d-15db-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.234.233.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772460366, "uuid": "f4f802e3-1640-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.167.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772431925, "uuid": "bc5c9e8f-15fe-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.19.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772485807, "uuid": "3098b264-167c-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.165.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416684, "uuid": "4083c001-15db-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.65.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772487364, "uuid": "d0d8560b-167f-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.74.6.14", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772413624, "uuid": "208f3b27-15d4-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.102.26.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772453044, "uuid": "e88be4e5-162f-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.101.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772491925, "uuid": "6f74e54c-168a-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.221.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772494746, "uuid": "009fa36f-1691-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.42.88.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772416325, "uuid": "6a3119c0-15da-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.29.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772476505, "uuid": "889f10bb-1666-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.176.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772418544, "uuid": "952146e5-15df-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.219.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772484245, "uuid": "8dc0e06b-1678-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.53.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772409845, "uuid": "53de9f24-15cb-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.174.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772465166, "uuid": "21a011aa-164c-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.220.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772445015, "uuid": "3714329a-161d-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.87.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772490065, "uuid": "1af0651d-1686-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "68.183.46.3", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772423044, "uuid": "0edd660f-15ea-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "72.255.29.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772476145, "uuid": "b205013f-1665-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "80.71.224.166", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444045, "uuid": "f4e3eb1e-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "84.234.99.21", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772435165, "uuid": "479e64b5-1606-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.5.142.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442724, "uuid": "e185937d-1617-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.219.23.145", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772437986, "uuid": "d909751c-160c-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.243.200", "Tag": [ { "name": "Arechclient2", "colour": "#1b320a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448736, "uuid": "e0a261dd-1625-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "affectionate-easley.121-127-34-164.plesk.page" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772447889, "uuid": "e7e93860-1623-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "antimalwarehub.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444046, "uuid": "f52e8be4-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "backgundchrome.oss-cn-hongkong.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442786, "uuid": "06465eb3-1618-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "bafybeig5e7vfagk6xs4b2kk6s2bgaqm4trr56whisnhzirxutlovqkcnli.ipfs.dweb.link" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444046, "uuid": "f5374971-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "chromitem.oss-cn-hongkong.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442787, "uuid": "06c80ed9-1618-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "chungminhtaichinhsaigon.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444046, "uuid": "f53500ab-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "connexion.synology.me" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442786, "uuid": "06358833-1618-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "coralasargetia.ro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444046, "uuid": "f51979e9-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "da1113.0r6ecdax.work" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444046, "uuid": "f510a38c-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "df1113.qmpqcv83.work" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772447248, "uuid": "69c83b05-1622-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "dnvigv97.comedianmental.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444046, "uuid": "f50a7fee-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "dorofeev200.ucoz.ua" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772471225, "uuid": "3d083873-165a-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "download.rajpurohitdairyy.in" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444047, "uuid": "f5ae1c30-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "dowsws.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772456345, "uuid": "98495fce-1637-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "ej41ykw1.slobodaspang.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444046, "uuid": "f4fe39a0-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "files.fatalgame.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444046, "uuid": "f4fb155b-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "free-imgislropw.icu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772462046, "uuid": "dde5ac56-1644-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "h977pm9s.judaspapal.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772443507, "uuid": "b3d4f679-1619-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "ia902805.us.archive.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444047, "uuid": "f607ed52-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "miryyjn.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772473568, "uuid": "b19f9526-165f-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "ni3h0x2y.gastronsyriansky.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772469067, "uuid": "36f124c5-1655-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "njpv91f5.eighteenshuga.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463786, "uuid": "eb484c92-1648-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "nobovcs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772448736, "uuid": "e0a0c2b5-1625-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "objective-roentgen.121-127-34-164.plesk.page" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444047, "uuid": "f592f347-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "onesevenonenine.oss-us-east-1.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444046, "uuid": "f4fec8b2-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "play-store-livechat-iifiufdasksai07235wief41344332i2j381ge.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772432944, "uuid": "1c3853c8-1601-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-0fd793cd3be34819ad48d5cf2e05bb72.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772433185, "uuid": "ab8ea9e5-1601-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-2159475f6e9c446cae5a8cabbb7c98e4.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444046, "uuid": "f5015b38-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-ddc283035a91433f85755edb9a06e562.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444046, "uuid": "f500e960-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "stonebet88.games" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772444046, "uuid": "f50107f3-161a-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "tikuprivate-uz.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772434085, "uuid": "c3d6dce7-1603-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "visual.trueblog.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772463786, "uuid": "eb48cbf2-1648-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "whovcs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772442546, "uuid": "77472dbd-1617-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "wpc99gxs.immunizeoot.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772447889, "uuid": "e7ee410c-1623-11f1-8b52-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.antimalwarehub.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772470446, "uuid": "6d135221-1658-11f1-87c8-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.kernelservices.eu" } ] } }