{ "Event": { "published": true, "date": "2026-03-13", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-13", "timestamp": 1773447324, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "2d5da108-f544-463d-ac8d-fe2a1747579f", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1773361337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773361337, "uuid": "17f26552-7461-4b93-8280-96f53b37016e", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773361337, "uuid": "c334fd12-87fa-4be2-a2f6-a6e6c99ab1c2", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773361337, "uuid": "62b82621-09c5-4d51-ad96-c7aa2e8674de", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773361337, "uuid": "ac9b4454-5316-423d-975d-2987e77feadb", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773361337, "uuid": "f38eee84-d184-4b6a-811c-fd8f51ba44a4", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfede720-1e75-11f1-ba1a-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1773362650, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773362650, "uuid": "c6d8081f-012a-47fe-a04e-7ee5ec60bd7c", "comment": "Malware payload (CoinMiner)", "value": "117efd7d1a1c07d32b02e9cd08aa15d0", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773362650, "uuid": "d236fb30-9289-48e6-b594-d1a688ec15cc", "comment": "Malware payload (CoinMiner)", "value": "2f480c7c373f82f813bd2fa70e5b537934b67c340bee700f532aecc0641f887d", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773362650, "uuid": "008dd000-7660-4171-9da5-b499731282ba", "value": "T1CF56BE7AB8002CE6D16E5277CAA6A8D933713C124F9767CB5860B7D61E737E0ED31A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773362650, "uuid": "efb06a70-941b-43bd-9da8-4759739637f5", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773362650, "uuid": "261888ff-ce21-482f-aa7a-fb6c2899698d", "value": "24576:KiDJG5D423h2Rzy1Rlr0QyyaJp1ss2NtdMxIRN1CknXt7gV3MEUCVP48bQ0B5TUD:KiFg82RSzcj0Q0XM/US", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773362650, "uuid": "1146346e-d6ef-4acd-9f2b-2d7e40bc375d", "value": 6180352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773362650, "uuid": "8716efe5-4ac0-41b7-a1c9-d7d83c8615a1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1efb9d5f-1e76-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773362809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773362809, "uuid": "729564c3-81b1-4f1a-b712-49dc77c47304", "comment": "Malware payload", "value": "e9656b8e476278bf27cba88c8c8ca452", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773362809, "uuid": "abbb05f1-72d3-4e80-81a4-5766caaf9220", "comment": "Malware payload", "value": "7422eaa9f0310c4eb2d34bbe425204b0906fc3b06abcf0e6f7ffd0ac94cc8034", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773362809, "uuid": "2d534040-cdb4-42e7-ba33-8fa9d5e60449", "value": "T19932567B21F08B32D7D410C963B61A614E72A70B496614B9F4FE5739AF2DA0370E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773362809, "uuid": "a61bbbe0-82b4-4fa5-8996-ad128d18e416", "value": "96:cCuolB6csht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvjKlWXaEXHArCAr8yQzW:cCua6p4hvZ5mN9oKNpivAwRc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773362809, "uuid": "cc747eb0-3ad6-4444-a007-b2b2b352c99e", "value": 11969, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773362809, "uuid": "cf5b05c0-4aad-4ea8-86b3-246d983d4dbc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48f3f789-1e77-11f1-ba1a-82aee05be84a", "comment": "Malware payload (VenomStealer)", "timestamp": 1773363309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773363309, "uuid": "9923b5a2-6710-4976-8fb5-89fc1ecb029e", "comment": "Malware payload (VenomStealer)", "value": "f5617974e5d6655102c3d47076efd3aa", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "VenomStealer", "colour": "#d49dec", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773363309, "uuid": "89a4f946-f766-4acf-8010-40f1d912c783", "comment": "Malware payload (VenomStealer)", "value": "49604c66c0f237e8a0a8c464cc448c8a7bce59f5d6de2a57653d08614b2cada4", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "VenomStealer", "colour": "#d49dec", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773363309, "uuid": "9fb82f23-0b3a-4e50-9a43-65b115b3fe95", "value": "T13286F14A6C620AE1C45E56789CF341DE77B1B8091B3323CB1FA9B9342E76BD09D79B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773363309, "uuid": "b71a024c-e91d-4676-b895-8db3a793c80e", "value": "ebc247a77b4d4a804b261f97a1fd075c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773363309, "uuid": "c0038750-5274-4ba4-a99f-fe096a60e43d", "value": "196608:m+9VkJzRlCLI9d3VOmp1zlXypsDvo1MZkzMJJaER3sCtG8:mkszTCLI9d3VOmp1zlXypsDt6zMJJapw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773363309, "uuid": "c106a521-091e-4c07-9526-0ce24165331c", "value": 7924736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773363309, "uuid": "c4510843-f983-428a-baf2-6f869c58e115", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1773365770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773365770, "uuid": "d4aa686a-296b-4f92-8639-abef84adbad9", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773365770, "uuid": "1a81addd-f086-428a-8ea1-e4e35ce94ae4", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773365770, "uuid": "451d109a-97d0-459b-bd80-eca3e6fbeb6c", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773365770, "uuid": "176aea6d-fb06-4c2a-997b-eaee278ab842", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773365770, "uuid": "101e7d44-e881-4d72-8e68-1347a613a8a8", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8840b01c-1e80-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773367281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773367281, "uuid": "04f8659a-3995-4513-926c-e8d949adc495", "comment": "Malware payload", "value": "05d823d11839087b5d4ebf255fb7c2ee", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773367281, "uuid": "92d1722c-b9b5-463e-8ce8-d2aca7328bf5", "comment": "Malware payload", "value": "4777748cb1424e88db889026ef8cfc8c015ef37ea3fe303029607c50e9b381af", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773367281, "uuid": "8016d53c-4574-4451-9152-b5e71fe13a19", "value": "T1E993093174AF052A166F436E80427B1CEBA981DBC600DBE8F4FD51595FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773367281, "uuid": "6c072155-4d0f-4470-aa09-b43dc5b3f4a8", "value": "1536:pmyp1tF/uwMmAIa14oXusIcepeV7tb73WAxCJCStkb5fv2v05x9krfiPEsCZKU6x:pfQI7zEStkbFv2v05x9kraEsCZP6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773367281, "uuid": "716f41c3-2e9e-4422-b78b-ab8ea8905737", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773367281, "uuid": "e22558d7-d938-429f-a5d0-1629bb26b57e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f68acc2-1e83-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773368582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773368582, "uuid": "c920d389-aead-4e77-b746-8e35765c8a20", "comment": "Malware payload", "value": "3f98dc236b4449680603bff5e7ada391", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773368582, "uuid": "16a5b66f-4af4-49b2-99e0-a19069803c57", "comment": "Malware payload", "value": "f8d2992680f98e4ff2bf0db867132832761224588ea5777f455a483df71c395a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773368582, "uuid": "6d30b276-23a3-444e-923e-bbee0f10b007", "value": "T1CED3195F93FA317571178359F9A6772492ACC133EA424EE2F8B6C65C8FC116201B72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773368582, "uuid": "4c4faa36-be4a-4f99-9f73-01c904d7bcd4", "value": "1536:YapArrl4k2wXmpdl4UsFufxQB/1025kA4YMhJgs:X2l4k2wXmp/4UsFufxQB/r6A4XJgs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773368582, "uuid": "a8c6639e-a4f8-4895-ad21-2995b0fbf5c5", "value": 136625, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773368582, "uuid": "9304a992-4566-4b0f-aaa5-cf21cdf956cd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "318f4c2d-1e84-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773368854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773368854, "uuid": "8c11bedb-c0c8-4620-97b5-81535709df1f", "comment": "Malware payload (Mirai)", "value": "daf84ea940ee9757231eedf5e3480bdc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773368854, "uuid": "8ac907df-11bb-4d8b-bfb1-3a7bd1507eed", "comment": "Malware payload (Mirai)", "value": "4cfe5a6aab1af5b76b2eb47e48fe3ee3e690b0e35fd2936d312acc7cef1b1d47", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773368854, "uuid": "0897bd44-0f68-40d3-beaa-ec8035c394b0", "value": "T119330951B8C6A557C5C497F2B75A4265330243A8C3DF3303E8288FB6324DA9E9F7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773368854, "uuid": "265f13bb-ac8c-4815-86e7-f9e6ea1b0291", "value": "1536:0KQayOJfi0k3bf1RqnDvK3IN96gn3XORtWe7O:XsrfGDvK3IN96gn3eR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773368854, "uuid": "faff4814-fcef-4232-b798-76ed822919df", "value": 52448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773368854, "uuid": "aba62373-4052-4631-807e-fcfe148fb6da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88c88db0-1e85-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773369429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773369429, "uuid": "8f31a0b4-c5d5-406e-b82d-01440111f59f", "comment": "Malware payload (Mirai)", "value": "90e877e2dae7caf58c30aa9d78710b37", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773369429, "uuid": "ede8c228-e67c-475f-8620-6c7ec5663b11", "comment": "Malware payload (Mirai)", "value": "55568b86b516b9ffca31a3164ab40d816d0959fa19e1974420ba4ce8fb8bb099", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773369429, "uuid": "861764ee-cc43-402c-8b50-621d69927056", "value": "T1C6C32859F881AB02D5C625BAFF4E418933531B6CE3EA7202DD248B3533CEA5B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773369429, "uuid": "07527e98-430d-4d72-834c-4983bb7867d4", "value": "3072:JIok718WYA9azbeK+c3Oep5af/cRLMprMan:A1b9azbeK+yOeXscRMprj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773369429, "uuid": "0f2d762c-f1aa-4786-a5e9-45ec0b90abb9", "value": 120292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773369429, "uuid": "e8c4cda9-3c6d-41cb-ad3e-2451121814f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e01b12aa-1e85-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1773369576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773369576, "uuid": "8a8b3c5d-2551-4529-8e60-19444d5ee1fb", "comment": "Malware payload (Phorpiex)", "value": "d56881c9efd4fde5babaea7b074b4b2b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773369576, "uuid": "19ae3929-2cdb-4d0c-b87d-cfb6ee945926", "comment": "Malware payload (Phorpiex)", "value": "0be73be4dde470cb4fb9bafc5604d12a044be5285fa10adcfa9b742e48308c87", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773369576, "uuid": "abe35c68-5484-4e24-b63d-6ab58080b44f", "value": "T1E002190B7E4681B1D3D80DF012F58B8E8A7D45632BC2A1FBF7B3C5590FA4650E0526", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773369576, "uuid": "6b616e80-467f-4fe4-b8fd-e5c5df95558e", "value": "0b2f31160a5382dbf07d030ba66e1330", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773369576, "uuid": "d655fdcd-1fac-414e-be6d-438c6ffce561", "value": "96:kDKI0grGCJBjOBdiGDFLZ+t8bb8PFJxGE9mK2FFhSC7tCEuZC:pBgrvJBjIZ+m8PFJxT4KmFhvuM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773369576, "uuid": "9da6c8f2-eb26-4089-a7b2-bac3bb7b6751", "value": 8704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773369576, "uuid": "ca5332c9-6536-4833-b140-8a3ca0b98757", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e9d5491-1e86-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773369842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773369842, "uuid": "9217d0d7-bf9f-434c-8d51-9e665712f23c", "comment": "Malware payload", "value": "c56b5254d4c64d2fb10e2430264039b4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773369842, "uuid": "ac01e4d3-cad5-4ec6-ad1a-19e76d65ff8a", "comment": "Malware payload", "value": "681d8656473457de4648e22393de8d05a6ecf2c2213895015b05970732801334", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773369842, "uuid": "6e7caf41-a449-4014-989e-19e8bc30a737", "value": "T1BC32453B21F08B32D7C410C9A3A61B654E72A70B452614B5F4FE6736AF2DA0371E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773369842, "uuid": "46192cb2-5fb2-45f5-8032-f05f3758f363", "value": "96:cCuosht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6y7OJgaqvlAA8Kb:cCul4hvZ5m5FG4j4HKNphvW/qd1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773369842, "uuid": "fd6d16d4-3cf0-41cf-a5ba-9cd69445ac71", "value": 10985, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773369842, "uuid": "afecdacc-63b8-4732-826f-14e5d5b58dea", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "166629fc-1e88-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773370526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773370526, "uuid": "261d2676-d79b-403a-b29f-7a1654647f29", "comment": "Malware payload (Mirai)", "value": "086f97465333690d3e9b80b0080cc437", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773370526, "uuid": "d3bef6cb-4e35-436e-9b2d-6cf3fc4fe1a3", "comment": "Malware payload (Mirai)", "value": "75e28b8b2fdbe2328d2b9ba16d69e3ebe27f70a4f7b2ec304302096d16c98ee1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773370526, "uuid": "6ab3e6d4-9457-4a91-8582-93b2da1d38d7", "value": "T12DA34A337E324C2BC5C0657636E74326E5FA439F50B8951AFD701E8CBB6A6103217B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773370526, "uuid": "40145ec9-57d3-47e6-b35a-f5ec0d41ef0d", "value": "1536:oAMc70WFJ5gwn9JjJw3z1EPQIzZn9tgytDo75QtTv0IlEtSNrEGe7jW:oeUw/jJAz1EPxpJoVgyW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773370526, "uuid": "6ae3a82c-e437-422c-8d9a-82ef88d1c0b3", "value": 100580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773370526, "uuid": "e48d2cc1-cc88-46c6-a106-a445bb2f8b23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e076219f-1e88-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773370865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773370865, "uuid": "1c04017f-c263-4f82-9e54-e0e4f6ad979f", "comment": "Malware payload", "value": "5ae507fa4227455ad5c2dee28c62b5aa", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773370865, "uuid": "fbded762-d277-40a5-adf9-5f448a59713b", "comment": "Malware payload", "value": "12ee851e4fdb49b7b4cfcc70d1a0d610ae00636ac08f1c3579182fed44980ff8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773370865, "uuid": "e9be95a3-c4e4-4c8a-a947-7ea69def68e5", "value": "T1F062473721F14A33A6E054C8A2771BA15F72D617856720B8F4BE26369F5DE0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773370865, "uuid": "2c1c7379-7158-47c3-9c80-cad7a3be4004", "value": "96:cCuhmB6csht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6Ml6fz7+kxBhj:cCuhK6p4hvZ5m5FG4j4HKNphvIjf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773370865, "uuid": "fd79ffc0-56b9-42ab-a1db-badd68a70acb", "value": 15322, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773370865, "uuid": "5f555da5-c4c7-4f02-950b-7f093a4ea5ae", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef9c24f5-1e89-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773371320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371320, "uuid": "f1bd962e-4aa3-40ca-903e-5ed7f845c85e", "comment": "Malware payload (Mirai)", "value": "676ec1f9c5d7cf545ff151c33e9f85bc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371320, "uuid": "a086e49a-7a03-4c03-bb59-370eef18b47a", "comment": "Malware payload (Mirai)", "value": "de62aa924bc7e48d6975c08706e47d1b85fda9c5bf22a3b84c37493681897a73", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371320, "uuid": "f3afed9b-3b1b-4cd0-a1eb-cf1dbe0281e4", "value": "T1B0A31991B8815613C9C556B7FB5E429937170368D3EB3203AE348F72378E89A0F7A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371320, "uuid": "2a628b43-0aaa-478f-b371-a7b5b6dcc77d", "value": "1536:iG8jibaOYcb5WbNw/BdgntXS0PpgaMHSOQvEWvAJyABj3XOO6gWe7aT:/DnGNw/BdgntC0xgaXsMMs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773371320, "uuid": "fceaee01-7ce8-4bb5-96e7-2d98c2a5d703", "value": 99660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371320, "uuid": "7c4a5006-fbe9-480f-98f4-4f2d456f2d9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c60e54f-1e8a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773371449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371449, "uuid": "089578d6-9ed5-4b2f-8bf3-fa3d7c4891ea", "comment": "Malware payload", "value": "461d56ad3d334218b7bebaf36a57ddde", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371449, "uuid": "00d614b5-e1ce-4d52-a206-76d374f05161", "comment": "Malware payload", "value": "dd0db3751165d0ca35e7765d8c5bc9dd98e2e2e52b893f3805eb0544419340ae", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371449, "uuid": "3edbfd1a-9b03-47ab-a20b-293e2373e287", "value": "T13634F1B383B4A8D967CAAE37E78205AE81D43E055720654699FFB40177F4338DBA73", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371449, "uuid": "21e2f31c-59b6-4add-b4eb-04015d39269b", "value": "6144:Zcxz/lFYgWF8tefPrKg1e3heq/5fzv3WA:Gt/VWFuefzKke3heG/V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773371449, "uuid": "78769db5-df58-43b6-9eb1-a84e2c95bc22", "value": 247896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371449, "uuid": "836d0470-284b-4d38-8d06-1108ddc6d2e4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ad42b82-1e8a-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773371527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371527, "uuid": "223c90d5-03ed-4d50-b4f7-d067113d827c", "comment": "Malware payload (Mirai)", "value": "b808080731b1f98e4c1e67695c7182ce", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371527, "uuid": "a83bd209-16d9-44cc-8777-2a11ea3884d2", "comment": "Malware payload (Mirai)", "value": "c2b1be8dd2eddbf70d86c5072f69a19b8347ad29d6f26f8811e3b9627391af01", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371527, "uuid": "0e06d777-bd4a-47ff-b218-1c6aa07dc682", "value": "T125936C02B30D0A47E65B1FF03D3F67C9839ED6D051E4A589361F9B899271B321887E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371527, "uuid": "32b52108-fa9c-4e92-b800-a9d1d608e5e5", "value": "1536:dn3xpZbxSUsIBppBaUV9UXlRjtGmVRy/AVwNIRH357g+q6f4BWe7lK:dd9WIBppBFUXlhoyR3VwNU3NgK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773371527, "uuid": "04162fc0-3ab4-4019-9c92-7e4a83c68629", "value": 93924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371527, "uuid": "65c5f2d5-406a-4231-a8c8-8504591de608", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90025c45-1e8a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773371589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371589, "uuid": "56d8216b-b8f5-4e2b-a3b8-e9912aa1829f", "comment": "Malware payload", "value": "48ade7e7098d42869800ea37b8108eab", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371589, "uuid": "a108aa01-c29c-4d07-a4ab-ec62bff91e64", "comment": "Malware payload", "value": "add17c2907abcf62c8ac8cdf26d6eabe54a576fd97326511f142b8c7bc78be38", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371589, "uuid": "3933d475-75da-40d5-b13d-c71ba7feab31", "value": "T17BD3185E93FA317571178359F9E6772492ACC133EA424EE2F8B6C65C8FC116201B72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371589, "uuid": "ceba9a7a-1ece-4f78-acfc-a76b660d7fa4", "value": "1536:xapArIl4k2wQmpXB4UsFufxQB/1025lF4BhhYTd:Qjl4k2wQmpR4UsFufxQB/r7F45YTd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773371589, "uuid": "bf79d7d4-d941-4ad4-8f58-712f008d4083", "value": 136511, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371589, "uuid": "cafa5f01-b9ee-456f-a761-a421ceee3e64", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b77fdb19-1e8c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773372514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773372514, "uuid": "668bf787-8b0b-4bfc-af2d-5699b8e9f85a", "comment": "Malware payload", "value": "8ab49e0a3f8ff4faf757c441d2dc3337", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773372514, "uuid": "42d1c3bc-982e-4e7e-a226-392b0f7b2f71", "comment": "Malware payload", "value": "8396df5f579975c16810f0efca097e72145de7c3ad403ffc112e39d8668cf07a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773372514, "uuid": "49ba9b02-98de-4357-88a1-93d15a47bb37", "value": "T13B613A7025F00C736E201944F3772BA6ABB7E8574A97618C388E2E396F97F42A5DF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773372514, "uuid": "c4e56cac-1c0a-4b9a-8e35-911ed718a72b", "value": "48:csRu9+J9nB6gHrJilrmAE69lr8z6E69lriFE69lrElEHlEzl/+yUm0l/w:cCuIB66Si6fA6fv6fiEFElaNw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773372514, "uuid": "2c61d0c5-ffcf-4666-9520-12412a18448c", "value": 3334, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773372514, "uuid": "fd86f1e3-e47c-4ea6-b07b-91a7ab354143", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d346f47b-1e8c-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1773372561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773372561, "uuid": "1928b4e0-2c39-47c6-b68a-47b9090a3659", "comment": "Malware payload (Gafgyt)", "value": "56353297694c7b6944e72a1d2f35b834", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773372561, "uuid": "2a9de1b8-6088-4a4a-a575-1f0f2e750a82", "comment": "Malware payload (Gafgyt)", "value": "76847058eeedd24ced98caf9803b6f5eb68ce7476b89d05c54c630fe60c65c8a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773372561, "uuid": "5845c4f8-f7c8-471f-a6bf-d5a0b1851946", "value": "T1B9B3C717BB61DEB7C85FCE7306AA4601208DE04612E96B6FB2B4C95CE74B94F08E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773372561, "uuid": "2b825ea4-fd47-4ce5-8525-0fc4142df35e", "value": "1536:ATPeTMM73bOYAz2Z9JsqpT2ff6ewXhh89ddEceZpPBf0mW+XFBSf1syui:CJlCxsvf6ey8f6nPBf0mW+XFBSNsyui", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773372561, "uuid": "8463c912-84fd-4a1b-8f39-a3a78b987704", "value": 113591, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773372561, "uuid": "074ec862-d284-4d0d-8eb3-4df3f985b36c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7c6cdb9-1e8c-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773372622, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773372622, "uuid": "23f26e86-5473-4deb-9578-3560e60abe2d", "comment": "Malware payload (Mirai)", "value": "dfba49d4412093dc8f5e0a9ca98cc7fc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773372622, "uuid": "dfa82716-eea7-4182-92b9-5bc2d207d86c", "comment": "Malware payload (Mirai)", "value": "5bad52bd6d594cdb9f4c2921c2d23b27cca71b8b9d05b95ae38020b66654adbb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773372622, "uuid": "d75399d8-bd9c-4655-be78-c49347b87c49", "value": "T1F3C31A09AF620EFBD86FCD3742AD0B0624DC5A5213B97B3A7674D828F54958B0BD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773372622, "uuid": "a9fe77a0-a4f8-4e10-b9cc-2042385cc525", "value": "1536:aAdJsfhqiYfbXW6GS3/hFC+Ep4O1VsUF4DFzUfFZpg/sjchCH6zzSBn8p8We7QBH:a9fhbo/GS3/C1VBF4DFzuFtcmHt+SZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773372622, "uuid": "8853a24f-ddbf-480a-888b-851af27c83ea", "value": 120308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773372622, "uuid": "47932a50-d33d-42ae-b33b-3d47f105a861", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af124ac1-1e8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773372930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773372930, "uuid": "02eafe7a-142a-468d-b09d-a26bc12a5235", "comment": "Malware payload (Mirai)", "value": "3c146024891c2ab161da865c27d370f0", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773372930, "uuid": "f464342e-c5fc-474b-9035-dea26cb677e7", "comment": "Malware payload (Mirai)", "value": "cd6bd9bb87d1f14626a2cd8a2b94ba23ff51f2985cdf151f73d1c814a704a3fa", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773372930, "uuid": "9f6a3bd7-6b62-457c-a384-418608ece08d", "value": "T132A339D7F800DE7AF80AD37B44970906B230F7A50A8317B63313795BED391A95926F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773372930, "uuid": "9592847c-ad73-4915-af87-6ec7bdc1559e", "value": "3072:FcVHjckJ3lWhEwwdLkn57FjBeDDYJujycUSjRP:Fcxjq/cLknZFQDaujycZt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773372930, "uuid": "b07c4ee7-5fcb-4331-a866-2944a85d70dc", "value": 104176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773372930, "uuid": "33409dc2-1f61-423b-b77f-707363d7cea5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73be488a-1e8f-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773373689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773373689, "uuid": "d79a14ad-7a29-41bc-b84e-7d95c96650cc", "comment": "Malware payload", "value": "6ea5ba8981ebe6c225fc4e98f1101575", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773373689, "uuid": "61adb6ff-f649-430e-b357-f19756237bd3", "comment": "Malware payload", "value": "e13780da0bd60617e54a2819357246d64227576e753c46a5108d2c653fa73f9d", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773373689, "uuid": "6d8872ce-167b-4115-878e-3c48b1de3d7f", "value": "T11A7302056F15ED0BDF100C733ADC8E9D8DB9AE5B49ABB0B568E1948F67911CAAC573", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773373689, "uuid": "9dd33049-3fa0-464e-b7ad-23defc7e000e", "value": "1536:pxpJNlEYvXndUt/afLuZmVelu9eoCtcCCzNbC4RWC0CQFN:phNlHuBafLeBtfCzptaN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773373689, "uuid": "2896952c-e182-4201-a58a-9c0178453a1a", "value": 76192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773373689, "uuid": "fedac862-4e3a-453f-b6ed-d7ebfe376908", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773376038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773376038, "uuid": "16f5933e-b86e-49bf-91eb-166511c57ee5", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773376038, "uuid": "10e0356b-af90-4684-9f3d-123b174bb58d", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773376038, "uuid": "26442f1a-6567-47a2-b533-defa68a5621f", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773376038, "uuid": "48425a7e-812f-44af-b7d2-9be91469d552", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773376038, "uuid": "704d4d67-da4c-4a33-8ac6-e5344dbc4049", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dc72282-1e96-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773376578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773376578, "uuid": "d9f25598-1fc9-44bb-8281-7a22d2d197fb", "comment": "Malware payload (Mirai)", "value": "c74c811ef271e4effc9113ad75638db1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773376578, "uuid": "724ee7d2-6e68-4d0f-9140-2f6d8382abb6", "comment": "Malware payload (Mirai)", "value": "8a03988c30292d8f652dcfe268e6c8754c2921dc64195cc305ef560c80f315c0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773376578, "uuid": "ff55cff2-9b45-4beb-baa7-d8b795e56d66", "value": "T13C43A40AFF511FB7D8ABCD3705A91B0539CCA58A12F53B363674C538B95A10B4AD3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773376578, "uuid": "02b16f73-c8ab-499c-8245-71dad96a8c5f", "value": "1536:jvEzgReoKCZK/X/jfUDCffV1GZ41oD/+WzBM+i:agReoKCZ5DCffV1G8ory+i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773376578, "uuid": "647a66ec-dd39-47fa-9700-d2666807db53", "value": 60236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773376578, "uuid": "1c199179-1a94-45c5-b8d2-39b5d3415523", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42d62f57-1e8c-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1773377168, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773377168, "uuid": "ed8cea71-d5bf-44c6-ba3e-d94ded64869c", "comment": "Malware payload (Stealc)", "value": "20d35681bf6271bfbc5e9ebd58be5c15", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773377168, "uuid": "5052e724-264c-4299-9622-7b26ddb8a4fe", "comment": "Malware payload (Stealc)", "value": "5273fc9f5c5c754bf37c58a391fe9ea7d98de470f042d2478d3beb0b71838b77", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773377168, "uuid": "1e46a90a-c4da-42c9-82ea-079877032c15", "value": "T170862313F14E633EE46A5A3A49729A00953FBA50641A8CA3D6EC3E4CCE3E4501D7FE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773377168, "uuid": "c94f8c19-2a8a-4088-b8f6-61a27cc286fe", "value": "e8ac1646024d52d1534a88da2e8037cd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773377168, "uuid": "6b89d680-71ff-47de-a7d4-36fdca72390f", "value": "196608:rDbt814oKAoPjEb7ztQZao5h1Qw0ppKSca8:rD5XjAXqZaoepp98", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773377168, "uuid": "bf901c43-d99a-4a8a-82ac-2c394a2a519e", "value": 8301436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773377168, "uuid": "39dd2599-c025-4096-89a0-9e3d5995f3d9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11abd81c-1e9b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773378679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773378679, "uuid": "85b0edbd-39d0-4224-a17d-88f080290a3a", "comment": "Malware payload (Mirai)", "value": "516f0c20790b4cb8f2e72da6245dc09d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773378679, "uuid": "34837708-5142-4a07-ac7b-9116f30e7445", "comment": "Malware payload (Mirai)", "value": "69eee08b587bbe58f552dcd0971ce52f65cd89bf311a102d3019f32bd9f49304", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773378679, "uuid": "1d5143d4-b98f-41da-88a1-94c283b2644b", "value": "T1DCA31859F9829B12C9C106BAFF0E518D3313176CE3EE33169D248B74378A66B0F7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773378679, "uuid": "32854b41-3212-4cb3-9422-9f53db2c41e5", "value": "1536:8qn9Kw+ku6wH+FDB73DYiRsNpaLqIOXMXiZtH4uKCq07Wa5ZUfj/We7Gx:R+kpDB7TRsNpaLEtHHKC3ya0fQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773378679, "uuid": "4a39dcff-1f46-4183-b630-a7f38fc49897", "value": 104724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773378679, "uuid": "61ce02cb-c19b-4b37-a126-d3b02eaaed1c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f0cfead-1e9b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773378755, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773378755, "uuid": "68eaa94b-9de4-443d-8541-033d3a21900a", "comment": "Malware payload (Mirai)", "value": "4132ab71bb8e4f2b44b2f9d32130d6f4", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773378755, "uuid": "a92db711-eb9e-4f96-bd7d-a57cbe1f470a", "comment": "Malware payload (Mirai)", "value": "1523cad779e7f197e40b2b20e0b6a862b241028ea16cd3e74370071488069dc3", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773378755, "uuid": "a0c49323-4d92-4d9c-b80a-f4b231cc6f79", "value": "T1AA343807A99480FAC4D6C2788FDEA526DA75F80CA134B51E2BC56F263E9CF209F1D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773378755, "uuid": "7cae17b9-dda6-4e29-82b4-57171136290a", "value": "3072:yVY/eEPC6dI2BT5xr+TFKeIuZtQZyNfzQjZLjY1jHdDgAnjzC5V6cIXW40RS:TeEdmq5xr+TFjZs9OMAK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773378755, "uuid": "8c0aa63d-1330-4e0f-883c-a0e4cc0570ce", "value": 235592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773378755, "uuid": "a727cfe8-87df-4b9c-aa8e-15225774d3f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6385906b-1e9b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773378816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773378816, "uuid": "11e0c32e-9803-49d8-a83c-e6f49ee9e100", "comment": "Malware payload (Mirai)", "value": "6632b3e4061c7b711446737c68b9249d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773378816, "uuid": "b7616037-90a1-4848-8917-df7706ad432c", "comment": "Malware payload (Mirai)", "value": "875cf3b5e80093585f132e9729e320e048e3740f3167974e9a3d80704c71628c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773378816, "uuid": "0a8384c6-7939-446d-a155-11375ee783ca", "value": "T193737DCAE643E5B1E8130531813EE7269275DA391024DB4FD7B49A37AC36904FA1B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773378816, "uuid": "e136d88e-7d9e-46bc-8a7e-5e2f8230f139", "value": "1536:m8DA8DccdWkytllnwplWUB7W0AJYbb8etLjSWedXauc:RrccAkynlwLWkXWEFpMVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773378816, "uuid": "b19d360c-ac5b-4891-84cb-0b278e81a216", "value": 80008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773378816, "uuid": "1f760446-c2a0-40cc-8885-b55017bc977c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09c29c50-1e9d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773379524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773379524, "uuid": "57224d34-1aab-4f0f-b876-ed9591836e57", "comment": "Malware payload (Mirai)", "value": "314d8aee6b7104adad8e55705f36fed6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773379524, "uuid": "ce506ff9-7501-4c2e-ab0a-51cf8bd0e44a", "comment": "Malware payload (Mirai)", "value": "0c0cf97259deef9093748ed30509b8b94e8b21839885d2a57156906cb2054035", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773379524, "uuid": "1728671e-0ccb-4297-99b0-1206938f4a64", "value": "T1A4341845BE409E37C7C1667BFFAE42CD332617FCD2EA3202EE015B25369A55A0E365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773379524, "uuid": "0431f7d4-4158-407e-86d1-37e35d6d8fb7", "value": "6144:Ar5JapqBX86lRZpFzUt0cyfoNbhmkLjC7dXOle0jMCKyq7shqqCe0Fq4I6aRi3B0:EJapqBscR3FzUt0cyfoNbhmkLjGdXOl9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773379524, "uuid": "9a5c327d-c8bf-4ac2-9619-f3da35a5c1d2", "value": 250648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773379524, "uuid": "ef96d9d8-79c2-40d8-bcfa-99e954204879", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34ad1d35-1e9e-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773380026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773380026, "uuid": "ac345122-15d3-437c-bbc8-3b473305625b", "comment": "Malware payload (Mirai)", "value": "30cea8063be3761538f1d6d84dbfc9e9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773380026, "uuid": "0d431040-5917-4fbc-8b40-8c7f1f536e92", "comment": "Malware payload (Mirai)", "value": "f4c7b83ffdbbc43ec3a12bc8e8f458c0649bf3fe5d1a9c23783ab924feff2254", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773380026, "uuid": "6a4f0c1b-4532-410d-8de2-d9d3ddca37fe", "value": "T14874190A6F911EF7C82BCE3742A90A4A30CC645752953B3A3974D624BE1F94F59E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773380026, "uuid": "fe70d494-18a6-421c-bfc5-3014a4e7f0b9", "value": "6144:pyNITNkrI6gvPUclbUS1TMvxJoXlo8NPv1sdg:sBGTMvLK1PWdg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773380026, "uuid": "517fe12e-0743-4ae9-8fe5-a9f9d39ae8e2", "value": 356172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773380026, "uuid": "21170acf-f4ab-4abc-b32a-ec136c22a4ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1a1eb4e-1e9f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773380745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773380745, "uuid": "6d0b35f9-eddb-4378-8b23-c3c15fc268d8", "comment": "Malware payload (Mirai)", "value": "d47966dfd5d466bf84792306f9cc60fe", "object_relation": "md5", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773380745, "uuid": "da6e0e3d-5115-4189-adeb-eb4f6c9bfa9e", "comment": "Malware payload (Mirai)", "value": "0c4754a63d3d3a5a4871d238c8eeaed440cd3943b0915c3c9d0c3856d165bdb5", "object_relation": "sha256", "Tag": [ { "name": "aisuru", "colour": "#af35c8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773380745, "uuid": "7f06dcf3-986e-460c-a199-d88b05e95719", "value": "T17E242955BC416F25C6D126BEFBBF81CA33232BFCE3DE7112ED0457143A8A85A0E265", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773380745, "uuid": "f9ec64f7-1b69-429c-8b49-0f525ce664ca", "value": "6144:CVMnmK67/+LZmppaLYB8/44JaQKiB1IqjwZYBkID8a9Q108W618lydqmLPa:dnBM/fpa08/44wC1Iqj7BkID8aK108W5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773380745, "uuid": "fe02fa82-997d-4a1d-bbcf-6732f6d3fcac", "value": 228544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773380745, "uuid": "cbc775f6-1a14-48d7-ac71-a085b4f40856", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f2f1cbf-1ea0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773380956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773380956, "uuid": "64f43a1a-ab41-48b2-bf0c-ea5bd6fd426e", "comment": "Malware payload (Mirai)", "value": "e4eab9db8c36b4b76eec04e75797ebca", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773380956, "uuid": "0a163243-be13-403d-ad64-e9a50c4d06bf", "comment": "Malware payload (Mirai)", "value": "dc4c4501e56d73d40a8e5fb00f4e0ad74335e2aa8c588373509438af312b1450", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773380956, "uuid": "678a88a2-d776-41ac-8205-9c7b6a15964b", "value": "T185C3FA5E6E329F6DF16DC33147F79A20D35823C623E1D685E2ACC6055E6038D681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773380956, "uuid": "3e46e973-483f-4247-8d0b-71fff57cf128", "value": "1536:DT/sAACw/FMdfdmrWLqYKDpG96O/aRX9Y1IfRA66OuJ11rpEzKdl3t1Ke7GD5s9b:DzzAf+AqLWRX9W7Ezilfcs9RB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773380956, "uuid": "c51d240a-1899-4bdf-bce0-02f04d123afd", "value": 119956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773380956, "uuid": "b80aa602-6695-4da1-850e-66b63a1adc39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773382522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773382522, "uuid": "f42de9e3-1b21-4222-92a1-823def5eb9a3", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773382522, "uuid": "8ebd3ed8-29e3-46d2-b403-8e3daf99227a", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773382522, "uuid": "b82ef58c-1304-47b0-a954-4c3a6afa6108", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773382522, "uuid": "bd594b8c-f430-4a14-8f5a-594cc768197c", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773382522, "uuid": "3c11649f-f3d7-4899-aecb-e2bceeff7e7c", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b783724a-1ea5-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773383252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383252, "uuid": "9c57ac59-6af0-49d5-b96b-106f97cd63ec", "comment": "Malware payload (Mirai)", "value": "c67db186df28a82585b9224d6fd7c2a5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383252, "uuid": "8f2c615d-ab13-42ca-bf18-d6a3c882ac11", "comment": "Malware payload (Mirai)", "value": "35cb900f84a5edc38fd710fbd1461554e1628fb19514755b5e0252c036a3c1b8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773383252, "uuid": "7d2f5523-553d-4e99-8917-f352b7c7c9e5", "value": "T15174E45B6A328F2EF279C63187F74924E75933D712E1C685D5ACE9101E2028F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773383252, "uuid": "92614fb4-b49f-4405-81c6-eded06a1d1d2", "value": "6144:Z1frXSo9oNcTPGTh7h6c2sSpp/9gJdhExaf/Uwd8xAaYfX:ZRnMwpM/hExfiiYfX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773383252, "uuid": "69c0db86-19ee-463b-9654-da48d3833727", "value": 352076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773383252, "uuid": "381b1f62-d430-45db-b52d-a4df66c70ea6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccd27e1c-1ea5-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773383287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383287, "uuid": "24d8d678-0a01-4fb1-a4fd-dee6bb52cf77", "comment": "Malware payload", "value": "28eec368a2e78797b29310a5addf7f5d", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383287, "uuid": "cc0a52d2-9275-4414-af83-910c7a77d34f", "comment": "Malware payload", "value": "454df205a1fcb195cb8aaa1625ecd8354c4119c270a3b3bfc49656c86669e355", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773383287, "uuid": "2444eb64-25dc-44b3-b987-1e81da8c0cd1", "value": "T10923073B47D0C29920AFA3F9542AB5F65E081B95E4D02F6670DC05B3B396DB71A082", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773383287, "uuid": "d748d597-0e00-4178-874e-78180d8e9114", "value": "384:bvfr5JCx8UnSezTD8OECxiuZCVp/sRxv5:bvmnd9xPZCVp/sRJ5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773383287, "uuid": "9f27d114-914c-4a45-95e9-7202971ba104", "value": 46715, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773383287, "uuid": "00e6a823-fc67-41f5-9bde-c0c722231258", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "effa7a85-1ea5-11f1-ba1a-82aee05be84a", "comment": "Malware payload (PureHVNC)", "timestamp": 1773383346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383346, "uuid": "e3d878d7-3b84-4b48-8342-aea906f151b1", "comment": "Malware payload (PureHVNC)", "value": "451c060e8920ae6bf31efceeaba86168", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383346, "uuid": "d321b6b6-6d00-4025-aba8-e05168f5aa88", "comment": "Malware payload (PureHVNC)", "value": "052fe35212937116240716b55603cb62ad3e76a2fa0464aa046225fa62a26e32", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773383346, "uuid": "02d5b66b-b15e-4846-9258-99f4230dce5f", "value": "T19B23091FD7EFACCA9B9537A0065E4D23058986AA1301927CF1DC105387E6FB666B24", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773383346, "uuid": "601cf4d7-3994-487a-93d2-af95d53cad72", "value": "96:/HtkUNOgoKde7/xNZtkpS8gG6SAeaefeoeUeUeQe3eASFedemNHPNrtk4mXIADZd:PtN4ZthuxKlrtOIAPGitAt+f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773383346, "uuid": "a5f5a5bd-acaa-4a55-bde0-2e8c5348bddb", "value": 46769, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773383346, "uuid": "66f35a92-bf75-428b-9344-03ce41540cfd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fe396b5-1ea8-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1773384420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773384420, "uuid": "cc654419-6351-4c8f-9e01-72f39a4fe92c", "comment": "Malware payload (Gafgyt)", "value": "08c97b61abbe8168c62b0c42809504bb", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773384420, "uuid": "d28eb901-49a6-442e-b85e-338881f95acb", "comment": "Malware payload (Gafgyt)", "value": "7033d65fa55d6b8092d4ab9f36efd7a3bff7d70b2cdbd25b7fcf86588cc47395", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773384420, "uuid": "9ac5bf0e-7390-4ed4-bae1-67a484253af5", "value": "T148442841BE405E37CBC1667BFFAE42CD332617FCD2EA3202EE055B25369A51A0E365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773384420, "uuid": "5a8b9a80-4be8-4e8a-940e-f26eceacec4a", "value": "6144:MIJad/myD7lRZhmOle/ZxWZag4XXGN5Erp2kQrvLaMJqYTTjoA4nA4Q2CF2ra2KP:ZJad/miRRnmOle/ZxWZag4XXGNmrp2kW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773384420, "uuid": "484d7f0d-ed2e-40d4-bd60-d7fee0ac26eb", "value": 254232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773384420, "uuid": "4439f4e9-f217-43e8-8e9b-2205f79524ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c09b5446-1ea8-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773384555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773384555, "uuid": "dc121e23-99d6-4906-a034-6cbf8e574b7a", "comment": "Malware payload", "value": "870c6083b2db832f2c28670e36a3c573", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773384555, "uuid": "83457623-59dc-47e3-9ffd-2802daaaea15", "comment": "Malware payload", "value": "dff594d32d8ee36274dc7aaeeedce1919ae5521e9afc9c36a677a8a9e236b808", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773384555, "uuid": "670f93c0-42cc-4b99-9425-b97a62508f7c", "value": "T1E68308327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773384555, "uuid": "2395f554-f100-4a68-8188-2eba8620ca8d", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbntWaTVN/:XEKltp9txAX/yr2pbtWSVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773384555, "uuid": "631bffbb-ad25-4243-9858-bae270457ed8", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773384555, "uuid": "b100a70b-2660-4a88-ba38-8e398096d8fc", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8142f4e-1ea9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773385051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773385051, "uuid": "29ab396d-1ac8-4199-8094-5007cf3a6017", "comment": "Malware payload", "value": "f1eef82f1a4acebfe90b5521988a86ff", "object_relation": "md5", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Kepavll!rfn", "colour": "#7c40da", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773385051, "uuid": "5e61ebf9-1340-43ed-9644-7390f372fe37", "comment": "Malware payload", "value": "c949af893700306a7be4c7ede661c73bdcfed2f5639a6ba8aaeb7a19f8f5ca8c", "object_relation": "sha256", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Kepavll!rfn", "colour": "#7c40da", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773385051, "uuid": "e704c4a4-aab5-4d85-af5c-65cca8861611", "value": "T1B61833631B6C8FC70F57D610D4F1E8CA9025B870D098D91FC96D9AF0878FEA73A299", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773385051, "uuid": "cc5d133c-e48a-4aba-8d70-490b140e84a6", "value": "1572864:1G8L/fA87Ws+YFdaZry9QJw7Bidv05Jtj8xlrH5H3FvAiFISVLh:1G87oIv+pFG7abTZH3dfIS3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773385051, "uuid": "713ca719-d201-41df-ae94-e9edecf86ed1", "value": 88946171, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773385051, "uuid": "b3c8a8e2-e24a-44d6-a53b-ed76717e9545", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773388809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773388809, "uuid": "74d2e627-8fb0-4081-ac5a-87fe0fcb1e60", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773388809, "uuid": "cdaccd8d-47d4-4f0b-8167-bc5faa3745be", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773388809, "uuid": "30183873-398d-40e3-8f4a-4309f84e27cf", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773388809, "uuid": "2c0ef6b3-b321-4852-b5b0-1aa6b08830cc", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773388809, "uuid": "d0134860-74a4-442a-898c-c04180688a0a", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "612c6d75-1eb9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773391697, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773391697, "uuid": "d9ab080e-a30a-46e0-be36-7d618a8d2f71", "comment": "Malware payload", "value": "e11623c5dde698e3867eff48600c2038", "object_relation": "md5", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773391697, "uuid": "f147b8a7-22b2-444c-83af-2050cf9b1910", "comment": "Malware payload", "value": "17f43b5e2a97ce35c51fe4de5889a6c4e8436cbbadd2d56c3fe123a6052c4816", "object_relation": "sha256", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773391697, "uuid": "1bde5253-2893-469a-8d11-88b65cc401b9", "value": "T1AE9733EBD8DB83F4DE029A7950D8CB5EBBD83078BB2E61893D44D2C16ADC5A534C63", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773391697, "uuid": "0edd6748-3291-4043-b020-3c07c2877e91", "value": "786432:vC5VKbywG1OwJCt3E0/n2IITgd5UlnGwNA2MlkgtJ8l39yqb2LjO8R/0Q3mr4Ay0:qvKbggRE0vJITeUlGw+FWgK2LjO8R/09", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773391697, "uuid": "8821cfac-e867-491c-b305-b0b0d99ad315", "value": 42990193, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773391697, "uuid": "c3f519b2-0fe6-4aa1-a421-23cf3f161cd0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "822c1215-1eb9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773391752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773391752, "uuid": "8a9f158c-2bc9-4150-97ad-60788c1c89e6", "comment": "Malware payload", "value": "598e02949b561a95d6c0bf9c0e49779a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773391752, "uuid": "9649f145-f3c5-42e1-881a-0c65e04538f7", "comment": "Malware payload", "value": "e0feefdb61a4101660c2e4821ab96e8789f6b3e2eaeb8aca1ca5389d56aa09f3", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773391752, "uuid": "5a01272c-05aa-4467-a253-b3dcee89c8bc", "value": "T1D78633051F424E6CE5280B38C00350A477F1D9A65657EB3F3FEE40BA6E77F88DA259", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773391752, "uuid": "ae6bf55b-e8a4-4cdb-be5e-842e8b75e136", "value": "196608:gCAt/nyFffNZYl6zNDNRNsa8P4DCGbqlZ3QYM3W:94Pytwl6zNya8P4DC3A3W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773391752, "uuid": "79567a01-d814-435d-989b-d71e53f3fa8c", "value": 8502784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773391752, "uuid": "dca3a6b8-35be-4a6b-8245-eff17169afaa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76f4dbba-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Braodo)", "timestamp": 1773397746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397746, "uuid": "a65535a4-a87a-443e-99cb-5434579d38ca", "comment": "Malware payload (Braodo)", "value": "4c98c3a83a09a80a540d75a78b1aa591", "object_relation": "md5", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397746, "uuid": "b927f433-680f-4334-81a0-ff925aafb59a", "comment": "Malware payload (Braodo)", "value": "42d34a7da8744c9c543dfa15f559eecd7ca6208cd9ce657363ae4de3fef1098c", "object_relation": "sha256", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773397746, "uuid": "9d0b7184-55c8-4edd-831b-56cb84711a96", "value": "T1CD5502968F272FDA6C392A8D04BE6B85C89C5D333C23C4F6DDDA150FC13859A1592E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773397746, "uuid": "8e69515c-3f55-4212-8464-183c7cc436b0", "value": "24576:uNs2GhZwiNs2GhZwiNs2GhZwiNs2GhZwuNs2GhZwiNs2GhZwiNs2GhZwiNs2GhZ1:u4hj4hj4hj4hz4hj4hj4hj4hz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773397746, "uuid": "f40dcfc5-976e-4d5d-a12a-e98714fc1c04", "value": 1351217, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773397746, "uuid": "2a73def5-9787-45e1-b772-5e30e779c12d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79d8abeb-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Braodo)", "timestamp": 1773397751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397751, "uuid": "cdfbf250-b204-435e-bde7-204a7e6cf67e", "comment": "Malware payload (Braodo)", "value": "f174a5d8df2860710469ee58d3a0c565", "object_relation": "md5", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397751, "uuid": "4c059861-d4d4-4c79-97a5-285c538d9592", "comment": "Malware payload (Braodo)", "value": "ee2f2da940b6d73878a3f7a5642c1d6604a186b4f42339007bdd261e452f3e5d", "object_relation": "sha256", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773397751, "uuid": "9766f0d2-d3fc-4dfd-83f4-67a76ef5bc90", "value": "T1C8273342C24A0766ED8FBF3532DA113FA568E12C766650DB3F1897C02CF36D66A13E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773397751, "uuid": "ba715e3e-6a4a-41c8-90ca-8d4e16bce18c", "value": "393216:KHJbQNpyOmmrN8Evjm6u+vV9r1BPWCpFD8uXd8G0wim6Cm2lKqEI575UKV5EgPP:KHJbQNp67mjm6XV95BFZ8Md8zwC2wqEU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773397751, "uuid": "01215baa-7747-4d5a-a3b1-5daa0c2d30eb", "value": 21952360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773397751, "uuid": "780a03dd-571d-43d0-b283-9d7745349010", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a84122a-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Braodo)", "timestamp": 1773397752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397752, "uuid": "ba5568e3-9883-4236-beb7-61ae3088273c", "comment": "Malware payload (Braodo)", "value": "10a0e172b606d94d36c28cdd0978f11e", "object_relation": "md5", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397752, "uuid": "69a42014-3ac7-43c5-bf8d-5fc8fe1a5f08", "comment": "Malware payload (Braodo)", "value": "a9003de00a9b15ee5da3f47fcb3df95f9aceb621a6afdf8f588398461e6bb941", "object_relation": "sha256", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773397752, "uuid": "880a81c4-5ddc-4187-be01-01067ddf5418", "value": "T10E55F125DB6A2FCD2D390E8D046E3D574D9A6D313D22C8B0CADF280F8125BF65662D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773397752, "uuid": "3e0d52b1-437f-4e83-a671-3c306e17f95e", "value": "24576:lgX4VtgX4VtgX4VtgX4VMgX4VtgX4VtgX4VtgX4V0:S4A4A4A4R4A4A4A4q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773397752, "uuid": "cb17c55b-86c0-4c51-a91e-209f807ad4bc", "value": 1351204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773397752, "uuid": "c76da532-adba-4f29-875f-e7a312784dcb", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5aec7e11-1ecc-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773399847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773399847, "uuid": "4b29c80d-3100-4433-8a99-075568d5527c", "comment": "Malware payload", "value": "ae0ba63ba8290f6d48c31cd1d38c0786", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773399847, "uuid": "6d03e97b-53c3-489e-9cb3-120311ddb9fb", "comment": "Malware payload", "value": "b6b7c10d2f3fd9edc51862b4ff5beb326a41a8df010bff37dc7809b523c9321b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773399847, "uuid": "2513dba7-d056-41b8-b182-391ab654d053", "value": "T106756B43BCC020B9E5A9D23289B211A17B71F85A0B3177C72E55A7B92FB63D41F393", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773399847, "uuid": "e7f016c7-73b0-4c7f-883f-cc50eb92ba43", "value": "f0ea7b7844bbc5bfa9bb32efdcea957c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773399847, "uuid": "a18574db-0801-4f92-8846-28d6c602b04c", "value": "24576:sPrkuq7yHj7uUcZCZjxZbKvLk+OcsYgtarDNK1E:sDkuqOH92vRMYgt2NK1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773399847, "uuid": "e250eb01-5a3e-4622-9a9a-a799e4aa194c", "value": 1640448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773399847, "uuid": "c3f54b9d-735f-4827-9b67-b8420f9f7069", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e5f8fad-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1773404228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404228, "uuid": "9ff5e9e2-5624-42ba-b89c-0567859fa4fc", "comment": "Malware payload (CoinMiner)", "value": "68eec7313abb4f69017aff8662b657d7", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404228, "uuid": "679c6bc6-5094-41de-a4a3-c5e17c36a4e3", "comment": "Malware payload (CoinMiner)", "value": "cd1251e2b55848eb45f6ae8edc1ef7b74b2721e8a8db7c6d95e67619cdca0572", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404228, "uuid": "ae285aad-4302-4b78-b10d-d42c4ab636d6", "value": "T1BD313210092EE327C7E26A50FE5FDD07EB8F805B705B4B04B9C8325A2087C1C05BE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404228, "uuid": "08e15a0f-586e-43ce-9daa-d37eaeccff73", "value": "24:BdVKYdVKvBdV7DGdVbMpvV6UjPDHA81cT/XQ+V4HTGNrn4fph62i8zVvbK06W:HXIHVISpvlJeQ+GzGNkfSB8zVvbT6W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773404228, "uuid": "ff185c5c-c100-452d-96f8-7b1d29c5ce28", "value": 1659, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404228, "uuid": "4ffa797a-2b48-4483-ab8b-4593b99cca0d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2778738-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773404289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404289, "uuid": "5bc74da2-c5d1-4984-ae10-b384806dc1b8", "comment": "Malware payload (Mirai)", "value": "8ee0ac78c9c2f25b0a9057dbfec923a2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404289, "uuid": "481df97d-324a-4e2e-a18a-476e25cb2f90", "comment": "Malware payload (Mirai)", "value": "d6b350f7076a655db6bb326ea6b6e56e9700385d03132e39b5ee97486acdae3e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404289, "uuid": "b3aa766e-98ab-4c00-856e-2c5da77f90cb", "value": "T1EAF3975E6E228F6EF269873047B78D259B6C23D622E1D644D2ACC1105F6039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404289, "uuid": "143d1569-f210-461e-b6ba-a1e59517317f", "value": "1536:YC5eAeLLNzG+XkgLp37bR84yA3q0ov4ireVy8izofyTHHrBHuYg5gWlO/y6Ja:YC4hXk+B84yuqxvKy8N+du97lIy6c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773404289, "uuid": "dbac98b7-6702-4e67-82f1-47318af17b71", "value": 165276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404289, "uuid": "c0e7787e-45f7-4482-934f-eb08436c0f6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2ad1065-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773404289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404289, "uuid": "181d11e4-adf5-4060-bde1-ae9341ca13c0", "comment": "Malware payload", "value": "af945489c7cac094c823253a3841b292", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404289, "uuid": "82a80022-b9d2-45dc-b844-171b74901acb", "comment": "Malware payload", "value": "e923f881a1106ff5e11c9d61815b124964929a3b8a925c91388e7976f19c3cf0", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404289, "uuid": "0b796636-92b8-4fe5-989d-7cd8d42cea59", "value": "T190E43338B14EDEAAE66F2FF4ED108623F7D0210D5C898C6C13E6C8DD745296A82CCB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404289, "uuid": "9709a02a-957a-4b52-8573-8c5d4d7110fc", "value": "12288:YkVOxDem7/a/breWluS0ersVLkIwDGiXOf3xI7n/VeWnIZTx:YSOxDF/0d8SRsVINX2u/VePZTx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773404289, "uuid": "f925ef11-482e-4e31-92c0-b59611f2de34", "value": 708482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404289, "uuid": "424b3afd-4f6d-40af-9683-144a99159244", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dde2454-f2d8-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1773404292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404292, "uuid": "2f23be32-4bd1-452f-86d2-c7cb02df0636", "comment": "Malware payload", "value": "e4d5b4b0f98560e882ef7d24b1012b6a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404292, "uuid": "b7d33285-4656-4c5e-8a5c-ded98e636e76", "comment": "Malware payload", "value": "d26c1da1978da0296f16094a6f20cca8d3d5e85f047fc0f80eb203aae6770599", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404292, "uuid": "d071477b-8f3f-4bea-a70d-6e45879c4cfd", "value": "T11CC3F1BCDC2C5442CA1B61F28C4ED11665DF841DF9E79A5672100A480E69EC0FFB6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404292, "uuid": "34189c4a-c981-43c0-a4a7-7fca4d678cff", "value": "3072:7gg9/shHyGE5/wskZ0MnIUboP1TXQEAh4:VkIGE6taMnIUboTgNh4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773404292, "uuid": "ae1d0634-6671-4724-9b5b-7e954ecfc6ab", "value": 120852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404292, "uuid": "4c746d83-49ec-4d20-9b66-5f19b7f24c87", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b47581ae-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773404292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404292, "uuid": "521d549a-0cfc-4179-a433-d4ea95eedaf9", "comment": "Malware payload", "value": "0a2a1be38b967c1e8d724539b227c628", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404292, "uuid": "91baa91f-4772-4a36-afd6-51c4a93f8a79", "comment": "Malware payload", "value": "399b4fb4ea821746e67e38b985186417e647b2574e12279553b3014538bdba92", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404292, "uuid": "801e0d6a-bfa3-4837-a335-136cbb6ff1a8", "value": "T1FA46123BF28BB53EE06A1A393972E114543BBA6064164C5396ECF88CDF751701E3E6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404292, "uuid": "70ab5542-dae7-4d4a-91c9-14221e561789", "value": "88016fcdef7f227c62171d0afad9aae4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404292, "uuid": "bcb5303d-dd77-4a82-80be-bf45d605364f", "value": "98304:R5OyFBqv7x5rSsBx+OvXyGbP2D8ty7wGX/gL7kBO5WIw0XDR6Pktm:Lj+7fzBh8D8tMXI3kG9t6Pktm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773404292, "uuid": "b8cef0ab-508c-4f30-980f-a152ffdc9f01", "value": 5745429, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404292, "uuid": "27e37d38-2070-4b0b-8703-00d16a45475e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4b643c8-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773404292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404292, "uuid": "01bc572a-a07c-4d28-ac41-7092e1580fb9", "comment": "Malware payload", "value": "698d811173c6ea3e5ae5f37251a8855e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404292, "uuid": "13bfd214-f0a4-4436-8f3b-f2abfcee3a87", "comment": "Malware payload", "value": "63a19cd37e5f23ba982d004e587472bdc30d64af04e1b321419d8173a16c60cc", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404292, "uuid": "1fd61420-9309-4851-a5ef-65753774a91f", "value": "T122A633D2F716492ED8B604328DAE07752B555D928A92870B7168373CBC3BBD84F98F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404292, "uuid": "77cebe93-fb00-4105-998c-ddb8d6eea42e", "value": "196608:OsXyrMOArjv2K4Id5MpmRY3PDgvv1ktR7rGGlpgoLyStn0:fiQjrqKPpRY3WeRuGlpgoLyStn0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773404292, "uuid": "70a0fc40-5aff-4748-9588-582523da7951", "value": 9541790, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404292, "uuid": "f9465cd0-3a97-45d4-9ee1-d532137c3e05", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5fd75eb-1edf-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773408133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408133, "uuid": "3dcba653-fa1d-4eaf-8efd-29baf0141cbe", "comment": "Malware payload (Mirai)", "value": "fdc2954570319c0abc05536c9c26c189", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408133, "uuid": "47f337c2-fa99-47f7-aa5a-59c8f98bfeb6", "comment": "Malware payload (Mirai)", "value": "43d010ff884f5d011402f9cb44d9349f89ca4daccdcc6cde3cd3ea8fb468658c", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408133, "uuid": "51c8353d-efc1-4b11-b4f0-01c71cd82a8f", "value": "T17AD3E1A8F490DF23C7D1697EFB0D1609731303B8D3EA73128D24CE216BA59674E36A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408133, "uuid": "30764d66-c49a-4bbb-9c0f-ead1cc1f11a0", "value": "3072:foTTImvmBwVu0eI6hNWCIqcsHvCtOOpuJwPrU:fgIwWwA9Wn1sSzpke4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773408133, "uuid": "73a1ce73-63f5-4a6b-b388-399bea3f3071", "value": 142204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408133, "uuid": "9576b72c-9682-42f7-8cd8-5b71b31f9bfd", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a600dc23-1edf-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773408133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408133, "uuid": "ba1fc2da-91d5-4259-b9c5-12abca44d619", "comment": "Malware payload (Mirai)", "value": "60018fe94b922b38c09f33fe7e0ba967", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408133, "uuid": "e99618e2-2c72-470b-ae17-8b073fa315db", "comment": "Malware payload (Mirai)", "value": "89c19a0fb0e501dba3b284cd494468d9e947ceb2e9817515dc5200a00f0942bb", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408133, "uuid": "986f0611-3c3b-47b4-91bb-4069578d9fb0", "value": "T156D3E165F4809E23C6C4207AF76E5688331307B8D7EA7202CE199E2137E6A574F3A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408133, "uuid": "c9ab590c-30e6-4ad2-9d0a-24ebf21a75b3", "value": "3072:7D0ownSrawgGlO7xTcUMZditdPAyMqGYqgiauL8cHZd6:7xwSuwgx9/YWPPMJznbd6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773408133, "uuid": "ee8c072e-0584-4292-a5f3-2095090f7ac9", "value": 142080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408133, "uuid": "b77599b8-81ef-4e54-aa7a-b847582d4ac6", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6043b04-1edf-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773408133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408133, "uuid": "4431e0c5-d8ea-4b35-b0e5-241408d37f7b", "comment": "Malware payload (Mirai)", "value": "e8444149f49c1187e96ba64959957531", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408133, "uuid": "77b91742-89e4-4f9a-8933-ecc250efed7c", "comment": "Malware payload (Mirai)", "value": "1c2a76792006add10b0a1d0685c5e8c26790d3dd87fee70e738bcab340305568", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408133, "uuid": "7dcbc175-e100-4596-a07a-ff56d500702b", "value": "T152D3E125F8D0DBB2DAE1257EF74E114C73134379D2DA3302CD289F26B3A665A0E3A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408133, "uuid": "b96594bf-486f-4a9d-a10d-efad776e99d2", "value": "3072:rponhnSMawBelnegY5Drl2bTUm6LiNKSGgEN+Q+lJb:rUhSjwBesgY5HpiIh+zLb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773408133, "uuid": "b8529a7a-f518-47a6-acf9-fbd21debc578", "value": 141446, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408133, "uuid": "80b1f3a9-bc0c-4304-b0b2-6af151301cf3", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd6b23e2-1e4f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773408861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "924894b7-b399-426a-af6e-5aa699404b7b", "comment": "Malware payload (Mirai)", "value": "19bb1fa0160bd7b032081e0f09bff856", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "36fceda9-e0fe-4e6d-9f13-3df0440e4061", "comment": "Malware payload (Mirai)", "value": "27ced56d34515f2b4375af87e15f705807d312ac8b912247fd2d67f8b833748c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "ba733cea-3821-4150-b8be-a2185cb169ed", "value": "T114E31945FD509B27C6D716BBFB4E428D372B07A8D3EA320389255F21378A95B0E772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "8ac4f0aa-6d4c-42b3-8553-48e9575b852d", "value": "1536:dEfHYnCeXcwqWzDwm8BrlxA5bBvADvkhTOxSPJqfrO3QE8iMHmx5hlF9wywne7fl:dEfqXL89lxEAoh6SPYBE8/GxeZH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773408861, "uuid": "64381e44-6d81-4d3a-b95a-b6b35f0e4b12", "value": 150208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "d9d07cca-f1d3-4b41-a9c5-38814db58a42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01ad99e4-1e57-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773408861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "1802a10c-7c04-420f-99ac-9a32dc300a4f", "comment": "Malware payload (Mirai)", "value": "b39a257c0c87c44357598492b81404a2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "63367d13-5a12-44ae-b532-ae9947657ce0", "comment": "Malware payload (Mirai)", "value": "43a185f368b4676cb959ee103a195d54baad4382e2795db3e4f9d5b93358b5f2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "697bc09a-6a98-496b-9ee4-b22080866833", "value": "T15BE31A45FC509F26C6D626BBFB0E438D372A1758D3EE720389255F203B9A85B0E772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "15231146-d1e2-4626-8e3b-f00c2e710d81", "value": "3072:wyz3mNd2fasjCArzGesFsBgAshgVbp2A:X3LCkCAriesFoBshgJp2A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773408861, "uuid": "2067ce7b-80e7-4dff-a53f-0f8b77c3ac37", "value": 146112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "11e6e218-a5dd-4c6b-9853-dbae8295034b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19eabf9c-1e53-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773408861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "30e4cd73-bb91-48a2-9b8a-59fd0d7f3eeb", "comment": "Malware payload (Mirai)", "value": "c8d02279f4440436a42a9ea0fd9ec9d9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "8a3dda38-5fe8-4fed-8e27-458ab235e9e0", "comment": "Malware payload (Mirai)", "value": "e7bc4857c84794ccb9e81ea4cb8d734f12f6afca7f6c315f15dc94ad39e02b31", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "d5ad67a0-5e77-4b1a-840a-f26a133cef84", "value": "T17614D819AF510FBBD86FDE3702EA070539CC651722A43B3A3674D528F54A94F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "b6f00c2e-cffa-447e-9a3d-cffacc7a84fb", "value": "3072:tIWY8ZEpaHEgXIxmTJzVDOj0uKlwl2YYH:tIWY8ZEpct4xm7GjKlw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773408861, "uuid": "fda32d6b-08ce-4f17-93a8-3b2207758b23", "value": 201384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "21971b17-35c8-409c-93b8-dd8e14024ccb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6e30531-1e54-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773408861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "52e7a2e7-8780-48e8-80fb-69d4d1be0ed8", "comment": "Malware payload (Mirai)", "value": "036b92de5acf59833861153330138afc", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "05284a25-9c22-49b8-860c-8d40a1052d1f", "comment": "Malware payload (Mirai)", "value": "f50d544d29372db781865f572aba12590c2d3fc5264c97e94089e81bec852084", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "d8077df1-4e60-4491-8a1b-c9ea92a5c216", "value": "T1EB14A71E6E228F7EF66CC73447B78A30975923D627E1D644E2ACC1145F2029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "b94128ac-f58b-4e74-9069-87956405df4a", "value": "3072:snzWV2K2gn8oquWoVBndv0MoqTZ25vUbYdO:snz02K2g8SJdgqk5vAF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773408861, "uuid": "4f1f399b-cf58-47f2-8a8a-40668e69005c", "value": 198344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "fd0cbcfa-97d3-478e-a81f-ef30c7ea7990", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc47c9b2-1e54-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773408861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "44d382a7-0309-43a5-b24d-34493e2d077c", "comment": "Malware payload (Mirai)", "value": "84729e9ad71edd63d78be25c614ad4a9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "205e3841-deb7-491f-95c6-de2a3f2636cd", "comment": "Malware payload (Mirai)", "value": "4e829c3a110573232a15b20f91491ac33c2e7d375d0c8ca9f0e0d3a702780b39", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "1be26b05-b2fd-4a1e-87f3-d14fc6094555", "value": "T161E34B06B5C0C8FEC899C1744FAFE63AD971F41D4234B19B27D4AB626E8EE205F5DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "973a7485-9d77-4cc9-8775-a15be177bb2a", "value": "3072:tQp8XAeZCH+JagDTeIpG+AFX2VTlniNIDM3:tXAeZ9yrV2O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773408861, "uuid": "95f571ce-500e-4d08-bd3e-83f9df4c4e42", "value": 155816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "1ebfb9de-275a-4602-a741-fcbb7c228b27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67d7e7fb-1e4e-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773408861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "4d40106c-ff55-456c-a9e5-98a8e18e3214", "comment": "Malware payload (Mirai)", "value": "230985af20685f65a03bce203fa65b73", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "7565b7d4-bee9-43c4-9c67-6f36b2c2508b", "comment": "Malware payload (Mirai)", "value": "2f7ab37cafd538adde724a335ea82da63a5a6b560714709e180ebf9d4a9911d4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "dda1fb32-e9bb-4290-870c-323eecafd380", "value": "T1BAF30946B8818F15D5D616BEFF0E128E33131B7CE3EE72029D245B347B8A86B0E7A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "9ffc8a5c-3a18-4553-a670-2acc05a3a6ac", "value": "3072:cS4am9yJyBnpU9iw0Dfk/aXaYZ6x9ktdT9+YsZC6o9h:ccm8CpmkDfSaqYZ/tx3CCrh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773408861, "uuid": "06db5dd9-04d2-4192-8c3e-4488802a9ad6", "value": 160540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "fcdc3920-4bd8-4278-8b79-1364a3ca0833", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ba667f8-1e5a-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773408861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "1019933b-fa43-4102-9e11-02ec56d765c8", "comment": "Malware payload (Mirai)", "value": "c90da50f031164a6b982b73cf6a99dba", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "00069527-352f-4554-9797-873b85c8b10e", "comment": "Malware payload (Mirai)", "value": "098c779e2c36a3b50d94aa1d0167a6e301cb1ce258733127f13d880f9347e40d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "a26606b5-7493-4804-94a1-1df216b62e73", "value": "T159C30845B9428B01D4DB31FAFB9F429933576FB8E3F97101D9205F6127CA98B0BB26", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "95086255-0f15-443e-85ab-5d8277d3a5ca", "value": "3072:/l0a5UYt6nc9TSmKpZqMVTzTah21trohdBEnnARufagH:/b5dwiApZDVzTah21trohH2AsfagH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773408861, "uuid": "c39d36b1-c8d4-4a7b-bdfe-1928e6ed0ecb", "value": 126432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "39b6c756-e357-4fb2-80b1-9cfb1bbb8974", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "580c8dc8-1ee1-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773408861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "260e04a1-5ed2-45a8-874e-387c2792c08f", "comment": "Malware payload (Mirai)", "value": "bc9fe25037eb9b947d9c490af5d2e55e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "d160bb63-1936-4ba9-8cbf-3e40958c793a", "comment": "Malware payload (Mirai)", "value": "5ae953a82d6da451c07952561fe9592d537ac0fea4f1109564ed67ecd9c0e0bc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "18604166-206f-441f-809a-2cc2ae16dada", "value": "T18173AEA2C0652DA0C2684138A5E6AD381B13F50196732EF04E568BE2650FEECF55E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "9407f302-16ea-4649-8076-4a79b73af569", "value": "1536:E/jnwcbjq+ZwJaFwtO/WlP1Y1NO6XQCUJy5MFaHMrBG0NMxCSJOP:ErnwmqiwJCJu5i1I6l+FaHMFGkMx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773408861, "uuid": "5c8e415d-6933-4b0d-817c-dacd21d7f7cd", "value": 74804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408861, "uuid": "24eee197-255c-4074-bb16-334781e67f18", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58285aaa-1ee1-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773408862, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408862, "uuid": "74077624-e06e-4328-9b6f-cabab865b5cb", "comment": "Malware payload (Mirai)", "value": "94b16313c2938dab152e47ec6ee2dd05", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408862, "uuid": "0976daff-d896-4462-94b5-04bb9d69093a", "comment": "Malware payload (Mirai)", "value": "ed6df656b2e4517a6a7d4024381cd920b1ec96518c1b05526f24f8b3c0739b19", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408862, "uuid": "54d6e2aa-46db-4ebf-9733-04cb5685f6b5", "value": "T1D2836A25BC792E13C0D4B83F22B78325B2E5230E25A4CA5DBD760E8EFF156A034575", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408862, "uuid": "45aaa10e-0be5-4ea2-b444-699e121d5f7e", "value": "1536:bKMo/69SyAXsE3QdMvjPV4jlbO4WQ5mQ84UAEO1K:2hCsZ6M7PIbvW4h8rAy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773408862, "uuid": "54ca26ae-f597-4c98-a685-cc5622943924", "value": 83008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408862, "uuid": "06102512-9339-4e27-9db4-2e2f009ca0f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0e892da-1ee5-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773410782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773410782, "uuid": "3952abee-10f8-4d42-9131-a6f6f8229675", "comment": "Malware payload", "value": "a20c6def4c9158fb8b80d6e11f2be6ad", "object_relation": "md5", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773410782, "uuid": "0064d668-8d3d-4f08-8bbf-b4b8c6406dd3", "comment": "Malware payload", "value": "17e3ba5da213b896ff9f1556e773abb4a4c4e6884ad8a33daffa38d2122a0809", "object_relation": "sha256", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773410782, "uuid": "7ab20ff9-97aa-4a4c-9a85-f1d12737bc4f", "value": "T1A538338EF4C937F2E043257CB65351B9E46434183F7DFA569079A2B621BE494A2F23", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773410782, "uuid": "78f8f1f8-028a-4e35-b712-e609b10b2605", "value": "3145728:4JhZPfx4ioInEJJ/gIY3Nmy28GWr1390tO:QvPf2ySk/t/rb0E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773410782, "uuid": "76c699bf-4e7f-432b-b910-ec36612b023c", "value": 105399274, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773410782, "uuid": "0d0a6466-0b65-4462-9ce3-e6a05d4dda3a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdb6f506-1ee6-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773411179, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773411179, "uuid": "b17272bd-8d7b-43db-a23c-aff59c6f52e4", "comment": "Malware payload (Mirai)", "value": "8dc7cf66ae7209f4991e827662a97de5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773411179, "uuid": "8f53e6b0-bc60-4f89-80b2-acc22d591979", "comment": "Malware payload (Mirai)", "value": "327265f8d359f8c76ad271b25d3e7f07c847be3837dd17e86c0682000aa35309", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773411179, "uuid": "85309154-eb42-401a-b3dd-4ca11373ba82", "value": "T13973AD32C42A5EA4C1844674B4A48F794773F808C6872EF6999AC7EA9443FDCF5583", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773411179, "uuid": "54ba7d11-e591-4d0f-863f-680526920cd4", "value": "1536:LA0EF5DngNLmwj6H37R8PO6uvKtkTq7ppgNCt4B/H7ytgw:LmkdaWPO6uytZfgNFP7yD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773411179, "uuid": "9dc924f2-3a23-47d4-8244-be81e19fe9fa", "value": 79556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773411179, "uuid": "dbe14ee5-b5f4-4b0b-ba33-c09aeeee621c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c7fe73a-1eea-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773412600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412600, "uuid": "93ecf60e-23c9-4103-9909-dfb91f9a45d9", "comment": "Malware payload", "value": "d4a379c67a9cc90e32295eb5b98a65b0", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412600, "uuid": "85c717c4-076d-480f-b12c-95541d8bf4a2", "comment": "Malware payload", "value": "a512379e17f8db4a289267be0531a073650d801eeb4ba3c50894bdc3f484bc67", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773412600, "uuid": "90b1955f-852a-4c31-8b2f-a431133cd105", "value": "T1CEF2D19467C0D40366CE4B93BF16BEECE42AA87279C8A44792547BAC68BD507C1F4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773412600, "uuid": "5c4f6ca8-3caa-46db-82bc-6c7f4ac2ef69", "value": "768:p/mVvtGUqdI8x384S26U69CIEgIONTy0il9orzcKWJZNzfg7ld8qNucV:bu326U6gjjy7T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773412600, "uuid": "f1c5545d-ca2b-4b59-a990-59117bf30c47", "value": 35471, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773412600, "uuid": "9593f1e9-fdb1-4dcd-8845-34f96f865582", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63f7349d-1eea-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773412747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412747, "uuid": "c068c7a0-d4e1-4af9-92e3-1ad6d6ca2e5b", "comment": "Malware payload", "value": "d78cba851834d1072c501725df523621", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412747, "uuid": "855b55e8-6b72-418b-8b49-489466b544a8", "comment": "Malware payload", "value": "c9c9f83800ef34e728d8e400833020f092bc3dfa2f9d317eae07b3ab945d5689", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773412747, "uuid": "8e340aee-e68f-4155-ad6b-819fc302eb4c", "value": "T16293093274AF052A166F436E80427B1CEBA982DBC600DBE8F4FD51595FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773412747, "uuid": "d509aa36-d84b-411b-b78c-f40e3b4b3640", "value": "1536:pmyp1tF/uwMmAIa14oXusIcepeV7tb73WAxCJCStkb5fv2v05x9krfi8EsCZKR6x:pfQI7zEStkbFv2v05x9krhEsCZK6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773412747, "uuid": "4da0e983-4501-4bd9-9dff-c35fb0437592", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773412747, "uuid": "272d8b6e-01e6-469f-81dd-993c5bd6ebdc", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bf65512-1eeb-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773413029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773413029, "uuid": "12154a14-c728-41bd-9137-62ae2d6e601a", "comment": "Malware payload", "value": "0bd76c76a87703d224d9606e0938c019", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773413029, "uuid": "7298d769-73e0-4bbb-ba59-dc3fe161b17d", "comment": "Malware payload", "value": "82a7c5a759f2acd409532260718dc03d5ce86fa2e056a8dc5628076c4f88574b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773413029, "uuid": "dc8428e2-c654-4d74-ab00-c1c35698c18c", "value": "T1E832567B21F08B32D7D410C963B61A614E72A70B496614B9F4FE5739AF2DA0370E7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773413029, "uuid": "73079761-a7ed-4c22-a067-41a84ad2e875", "value": "96:cCuolB6csht+O+v1fsn+h4+tIiKkC1ymysuKNpUj4waYvjKlWXaEXHArCAr8yqzW:cCua6p4hvZ5mN9oKNpivAwRS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773413029, "uuid": "913ec8e6-5f16-42b4-9dd5-a57d2bbc6726", "value": 11969, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773413029, "uuid": "223f875f-7340-4f0b-a533-c21c2d415188", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97e5c690-1eeb-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773413263, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773413263, "uuid": "a0ae8ee7-9444-45c6-86b3-7f69ae572bdb", "comment": "Malware payload", "value": "23e768b66b739712085579effbc86992", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773413263, "uuid": "3f0ffa73-8826-42b3-8512-73556c59d712", "comment": "Malware payload", "value": "8da42d55d6c0b736f534ed7a363d3e3d9a0eed5b3e6c1200849b21d6a51ee407", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773413263, "uuid": "8d444e3f-885b-400c-98d8-ab17b176a982", "value": "T11D11DC0856F34107658BAC122FA5B20826E39453448AFE233ACDB780CF8926884EB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773413263, "uuid": "d543afc4-2bd7-4a9b-9a5f-ecf1aed28adc", "value": "24:hYtvuvFmRqcDhbFUEq0J8JfWh0SrRlUFLFR5G2Mac4T:39QHUZ0J8J+VlqLFRuavT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773413263, "uuid": "dece4663-07c0-4482-9ae1-3c3dd37e5fcb", "value": 1100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773413263, "uuid": "b9c72e3a-0031-4d49-94fc-8d7f848421df", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7285d03-1eeb-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773413423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773413423, "uuid": "e046750e-794b-4afa-88b1-e80bcf05e1bb", "comment": "Malware payload", "value": "62f2ba3b8c55d058ab4793f48b8f6603", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773413423, "uuid": "a69451a6-dede-443c-b690-10c8f1929ce7", "comment": "Malware payload", "value": "cd91185d2164346cde807811f9683d12e5c206491bb6f6b10779bba136039f36", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773413423, "uuid": "c2b9f17c-37d8-473b-82e6-0f3be2e8ebcf", "value": "T1E8D0A7CA9D76504BD816503199BB933693EADA07432717162F8D5002A794D447E602", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773413423, "uuid": "acefdded-9e70-4add-9c22-b7aa2ce85d83", "value": "3:u4qsqmjgGXXtZ91zZ8LStIuQ2lsyL22/UScCKV62UTzsWlDlBlYQjuJVF01OK:unsDgGF1zaoZf22/USc362UnZBBOFi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773413423, "uuid": "386844a6-abb9-4029-bb58-e7c2dabf3800", "value": 237, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773413423, "uuid": "40edafb8-477f-49b3-8769-8a939d8a62e1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a4b2a4f-1eed-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773413992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773413992, "uuid": "a83225a2-3e4f-49eb-b1d9-e38d2f247af2", "comment": "Malware payload (Mirai)", "value": "75ac5b70ae7ab50b4fbc75e64643eca5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773413992, "uuid": "190a4e3c-7bb8-4ba3-8795-c2efec033e6c", "comment": "Malware payload (Mirai)", "value": "e87700e1c78335c9165eb5aeea10f4bbd2c9dd3ba8fa5f2d45203f0e6da20b8a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773413992, "uuid": "145ecf38-a82d-4792-a95a-fcbc36090a5b", "value": "T176736DC1E683D8F5DC120A71317BEB339777D4391129EF86D7A8A932AD42601E5173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773413992, "uuid": "951a16a7-9060-43d5-8726-cc46055b066f", "value": "1536:YWKIDXUpvtwvahnjUlZdqNAzoZG2k3i+btj2lIkeJEHetT3E54Sn7S+3:Ymr2SvahngfINAzoZ5k3jbtj2uLJaetW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773413992, "uuid": "a832ad20-595b-4ae3-b4f5-53b5d617f4cf", "value": 78736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773413992, "uuid": "d48f9b65-b485-4fd5-82b0-6602bb9d2e29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd7818b0-1eed-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773414212, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773414212, "uuid": "01bb1fc2-ddb3-4933-bdaf-ac21b75b8d10", "comment": "Malware payload", "value": "9f65490022769ef96af8a5d135760bd0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773414212, "uuid": "eee323de-f2a3-4aab-bd59-aaf71642fbab", "comment": "Malware payload", "value": "6d5332d79b274884e56818e814950a1871f7c61dd0503290f87cce85bae7be12", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773414212, "uuid": "b28c8292-68e6-4ccb-aa3a-56c68f4f9d7d", "value": "T184563381B6D1CAFBF51CAAF20B67793F275FF3D190504678DE826C68822526536310", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773414212, "uuid": "91040932-f815-4db4-b559-e5d8d4096654", "value": "4b8ea275b01195301d047f45b8ba14d3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773414212, "uuid": "dc9c0e00-bd8c-4817-a676-c413bdc02181", "value": "196608:Ba/CtB6fu1ravhjAFDLTiEfUJs74rVa9xSm/pBCPhk:0/gB6fu1ravhEFfrcsea62pBCPhk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773414212, "uuid": "646cf081-7b17-4f79-8c7d-5c6169585d91", "value": 6302186, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773414212, "uuid": "4292bd0d-44a6-48ab-be5f-de20c931b26b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48adccd3-1eef-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773414849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773414849, "uuid": "f62dea5e-4062-41b1-a370-741aecfad503", "comment": "Malware payload", "value": "2982edfd9082d1761f7b0c188e99d07d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773414849, "uuid": "1fec5e3b-4bef-4a39-900a-2c25758d88c5", "comment": "Malware payload", "value": "da8bbe667f0ae92fbe02aaf84cf9b6d646335277dd91130a0af80038c96830a1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773414849, "uuid": "ba103a98-e862-4b8e-a230-6468bdb21382", "value": "T13142387621F08A3397D025C4A37717A55F72E60B44A724BCF4BE1A399F59B0370EBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773414849, "uuid": "73e5060f-f0c0-462a-9351-ac4e09eeb0ca", "value": "96:cCu/mB6n7sht+O+v1fsn+h4+tIicqbA/GsGqNz2rJO11IB4IBq5rC2OJyJpJDDAz:cCu/K6nC4hvZ5mzjE+f1mSM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773414849, "uuid": "f9da4819-c642-4610-b33c-8a3d0a0fb7e8", "value": 12732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773414849, "uuid": "47aa0d55-b761-4189-8254-d830c4ccf2ce", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b1ed77d-1ef0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773415282, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773415282, "uuid": "c15baed8-0615-4b93-b305-8b9551c8405a", "comment": "Malware payload", "value": "2330db26288e9d6c0b3c9c274e9765d9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773415282, "uuid": "6aad0653-99cb-4a09-a495-7050ad8bdd85", "comment": "Malware payload", "value": "562cfc78728bdbc609e51c15df149ad3694428905d1eb6a88f242741bccbf376", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773415282, "uuid": "75d83c4e-ea1c-4446-bf38-1c8b71c0dd36", "value": "T1F08308327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773415282, "uuid": "0ae8724e-be05-4016-9ef3-4d822a092b02", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnDWasVN/:XEKltp9txAX/yr2pbDWNVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773415282, "uuid": "d74c93d2-5088-4683-a831-06e87300e8f6", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773415282, "uuid": "7a42eb90-f1ed-4b99-bf2e-411355f30498", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddc2a763-1ef2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773416387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416387, "uuid": "37d6fb55-6c6b-4766-bade-c33e304bda99", "comment": "Malware payload (Mirai)", "value": "1688b7461c74a0752bd2e4c9d76f98cd", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416387, "uuid": "255cfb28-6786-4911-b762-462c963a5c2f", "comment": "Malware payload (Mirai)", "value": "e06cabee30edff3e4d4cdcd413eef1adcad0009ec695af4cf4e861bcd5af614f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773416387, "uuid": "c6688628-b57b-4935-99ce-1b11bb3c80e3", "value": "T1804319791985F67CEFE10078F09320E6256247183B8D95D36193643BFFB5A0873A9E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773416387, "uuid": "970f9c0f-e812-4a66-a5c2-704c1c852108", "value": "1536:aND9xxEYYxmeT/cuOosbYdRjklvZ6bzuWh:aNPxYmepOosbYdRwlhw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773416387, "uuid": "a7071e95-d683-4f57-a21e-cf9108152d31", "value": 58804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773416387, "uuid": "dc3389e6-405b-4f3d-b80a-9edc390c6c4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec814e12-1ef2-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773416412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416412, "uuid": "580fabd4-a6fd-4722-83cd-f5b9b92bc262", "comment": "Malware payload", "value": "b4e205788215d1ad2192f19554bc00c3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416412, "uuid": "b28e37e6-bf50-4ea5-a202-11a02875b8de", "comment": "Malware payload", "value": "81ec1988fd1a090574fbcdcb7e7fb9fd0a2059fd66bc343aad6000b5b083ce71", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773416412, "uuid": "d4caf5d3-ad02-4fd2-982c-de760aaf046c", "value": "T13134CE3AD243421A093C434152B1AD21D778B5FFD4E24DED2AAB6E01C56FA7EAE307", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773416412, "uuid": "d8fc57f7-d9ef-41a7-b9f4-6e00906b4a2b", "value": "6144:9Uu58Fh2PvBKzYeBovYMbmuqzScGBR6Jqudj:iuaFQPvQQSvzSppudj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773416412, "uuid": "328132ea-1e37-4096-9d61-fac9b798e469", "value": 239704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773416412, "uuid": "7000298d-a2c4-474d-9cf1-5a44d538bec0", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05de108a-1ef3-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773416454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416454, "uuid": "bef24b13-2fb1-4684-b900-d3ecfa4504d4", "comment": "Malware payload", "value": "26a77368793738f9b2afb2a18866654d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416454, "uuid": "26769a55-1e23-4d11-b3b2-45136ef1bfa2", "comment": "Malware payload", "value": "42d33186168e9f554793939d2cf79625c02da87edcfe9bda99e5d02253636ad8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773416454, "uuid": "11fc6d88-7a6d-44f8-b2df-b3f704f997a4", "value": "T19362473721F14A33A6E054C8A2771BA15F72D607856720B8F4BE26369F5DE0370EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773416454, "uuid": "2dca9825-27fc-479e-b414-e0c369f810e7", "value": "96:cCuhmB6csht+O+v1fsn+h4+tIiKqCTyOysYtujtuHKNpUj4waHv6Ml6fz7+kxBhx:cCuhK6p4hvZ5m5FG4j4HKNphvIjN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773416454, "uuid": "6c812b93-0c52-40bb-b43c-aa1ecc6c8563", "value": 15321, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773416454, "uuid": "513cb542-77b9-4e44-9f81-7a9921e1dd8b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48e34ae8-1ef3-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773416567, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416567, "uuid": "2535aba5-17f2-49af-81c1-a687b5432280", "comment": "Malware payload", "value": "522825b486d7baffcc166bb1b7011744", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416567, "uuid": "419cb213-2428-4623-b7be-a0d573a194de", "comment": "Malware payload", "value": "7772badc5d054feca5134c59534f6aab01406b3af52d131f8cb2a0343eaef25d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773416567, "uuid": "682df985-973a-4d50-8ab5-4a4b9aaeb8d8", "value": "T130D3195F93FA317571178359F9A6772492ACC133EA424EE2F8B6C65C8FC026201B72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773416567, "uuid": "65d8b633-3498-4cc0-9843-cc6148f9c207", "value": "3072:Qjl4k2w0mpR4UsFufxQB/r4KIIinxtPh6I7W4Kxk1w75PwF4lYTd:Cl4kWmpR4UsFufxQB/r4KIIinxtPh6Iv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773416567, "uuid": "61e9e8e9-6a75-4be4-beaf-73d48766befb", "value": 138192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773416567, "uuid": "b29bdd68-4e98-47a8-95b8-378db6b132b6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7a26397-1ef8-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773418927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773418927, "uuid": "d5c5e2f5-c048-4547-a275-02ddf430f5de", "comment": "Malware payload", "value": "59238b0148bdd2e89a7d0f6585f2d442", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773418927, "uuid": "6e79bb8e-20e6-4adc-b21a-cab1f14d16a9", "comment": "Malware payload", "value": "393c38626cfc87137e608d53a9d5334d86b9ee941bd90bb17ec7083ba19b1a21", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773418927, "uuid": "db201026-84e7-4e17-b016-e8f4dbed0b14", "value": "T14A267C07E19223ECC46AC1FCC7D7A232B6357C454534ADBB5170F6312E72E9C6A69E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773418927, "uuid": "b1caf328-3d2d-4682-ad79-cf978256e71c", "value": "6ea70062ad183fad959af98c29f55101", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773418927, "uuid": "a04eff74-4a8b-4583-b79a-67f24721a2f7", "value": "49152:VgmnbwUuzhQb2ZktsQeaE81uXjxmCg9RmO+EQRVun25yPpO011VZvc1VOlsz0VgC:Owb2dQehXjcfIQpOG7ZE78CpjqjQsA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773418927, "uuid": "1a88b888-7ce7-4f04-8ab1-08a23d84cb47", "value": 4518912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773418927, "uuid": "80a8f46d-b81d-4b54-bcf6-9bd90c378555", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5cef423-1f02-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773423246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773423246, "uuid": "77453d44-e48d-4777-a35c-06ee4da838c4", "comment": "Malware payload", "value": "6e23b166fcf4dcd33e740c0062cef3ef", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773423246, "uuid": "e2256506-64ab-4526-ab07-97710c3302a4", "comment": "Malware payload", "value": "cbd018a884e5314f5fb1cebf973012d7c420c6d0f633aeda37dfeff3cd739e61", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773423246, "uuid": "e9a0a307-9e23-4cdb-9eaa-6b77e6d0aa8b", "value": "T18A926C43BA11C22AC05CAF794E77CBA807763C44DD9A10137AF6738D1EB61E479993", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773423246, "uuid": "fe05fae9-0a6f-4640-b246-07c5d48374d6", "value": "384:/F/wV9MhwQ7tp+mve/OB1oIRmH3an/a4aFbs:/F/sOwQnDsYRKCyI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773423246, "uuid": "f76a739a-dc24-49f9-9a11-0ae637d3fb4a", "value": 20992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773423246, "uuid": "0ea54d8c-292a-42a7-a9ef-3378ef199aad", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ace4ef49-1db5-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773427875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773427875, "uuid": "5ad1cb3b-c84e-435e-9893-291bcea2fa99", "comment": "Malware payload (Mirai)", "value": "cc1760c1a898dd5fee088d7e37f30eb2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773427875, "uuid": "171e4abd-b491-4ceb-86c1-66f7a111054c", "comment": "Malware payload (Mirai)", "value": "5079206433607fd6dc1af3bf52cedce1a3be292048ada3338620fe9aee26283a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773427875, "uuid": "d982ceae-0ad9-4df8-afbe-da334fada0e2", "value": "T1EB5140D6F75206306F7AAEA7B9B64805B19990A39DD0A906F4FC7CFD528CE0C30906", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773427875, "uuid": "a9c4b2c6-ca1c-456b-90e0-043599e93ea4", "value": "48:iEzLmzLVzLVzL7zL5zLtxEzLazLVzL6zLTzLtzLBzL4zLIz:iE3m3V3V37353LE3a3V363T3t3B343Iz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773427875, "uuid": "03f43d08-2436-4419-a0d5-7ab461d31db0", "value": 2794, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773427875, "uuid": "6a071927-837a-40e2-bf42-a6ab2dca68b1", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "448546b5-1f11-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773429444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773429444, "uuid": "b6c19980-7498-4ed9-81b0-d508ea1ac8ff", "comment": "Malware payload (Mirai)", "value": "073349fbecfd8384d834e2a6039f5319", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773429444, "uuid": "4e7e5075-b219-4813-9556-d398bf6ade03", "comment": "Malware payload (Mirai)", "value": "4641db7fcc6016646eabbec769d67a4d52eb3c2803272045ba9aeb10d83878dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773429444, "uuid": "0bdc9fcf-e403-4fbc-b9a7-bdc1d7aafac1", "value": "T14F14965E7E22CF7DF668873047B78A20976933D626E1D644F1ACD3181E2025E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773429444, "uuid": "a083f2b0-5524-4134-ab9d-4822b6bcc0d9", "value": "3072:CVaQY6iDYe6g9sZW2ViQ676iw/3PJr+9e50Z8hKVxnh:CVaQYHbpac6T35+9eiISnh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773429444, "uuid": "1e48296a-bce0-4e8f-b4f6-6c7b44ea0d4f", "value": 208116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773429444, "uuid": "068a942f-1b33-4e69-ba75-7b7a5096d64a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d19922dc-1f14-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773430970, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773430970, "uuid": "e1234f95-44ba-4716-8886-e96a19be037d", "comment": "Malware payload", "value": "e464b12739bf87d933f08d0f1018ce1f", "object_relation": "md5", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773430970, "uuid": "90609ec9-3514-4b47-a1f5-16c7843cacb2", "comment": "Malware payload", "value": "c290cee85135851b18310ff007b1c7af8e13bc07b72e84ec5555f53daec4899b", "object_relation": "sha256", "Tag": [ { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773430970, "uuid": "1cc47532-0919-4337-956b-f81c432c710c", "value": "T16C15EA8CCA718C403F04BA71A8BBC935DCB75CBF3E4D67961BE244F257689749A1B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773430970, "uuid": "67602080-1259-4b1f-8e44-b69663e29476", "value": "768:InRbr21q6YiVLovrq6YiVLovrq6YiVLovMJPP0acketq1h3IUc4QclD:D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773430970, "uuid": "909b35bf-fd5c-491c-a105-50f4d4079a63", "value": 939000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773430970, "uuid": "d725a077-ddb0-4ba5-a712-b619e533a55f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a551b118-1f1c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773434331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773434331, "uuid": "402d1f32-f366-473c-bed0-24067ad3a262", "comment": "Malware payload", "value": "6356af9fef03e1b783f85679c597703d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773434331, "uuid": "383cbf6c-361f-452f-98b8-bb7d7b499cd2", "comment": "Malware payload", "value": "457e5ba4226277b1aa89b065a5e109295cf2f26a8d2053239f0c8548218e219d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773434331, "uuid": "6790412c-dede-48fd-8206-2d47027ccf8e", "value": "T1FA81A4B035F04D732E616A80F3372BA6ABB6991345A3318C35DD2E395F86B12A5FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773434331, "uuid": "a061fb0e-5c74-4dd3-ac02-7e7bc0e4babf", "value": "48:cniRxuGRy/+DdvnSfr7lwnYJ/dl/B4Tilwn8Gs7wnizLI7wnE/+ol3+L+ol3Mt+a:cWu47kQMaXv+R1mhm/IBRIBAybC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773434331, "uuid": "6ec75109-73e8-474c-aaa9-5fe2f21bd7c6", "value": 4023, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773434331, "uuid": "7ae09a23-a259-4f03-874e-43b9146b64de", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b87dc179-1f1d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773434793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773434793, "uuid": "19513542-99ce-429b-946d-68ba99492419", "comment": "Malware payload", "value": "09ca1a6950f4c60a0e7eb834cab70267", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773434793, "uuid": "94d657cd-4f1b-4c70-b254-0d6f5a45ff26", "comment": "Malware payload", "value": "0323fd24e26cce811693b77073fbf326a838083f038e6aea58f5fd3d8065d965", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773434793, "uuid": "f0370167-fae2-448c-9272-d178cfc5295c", "value": "T14A626B7621F04A335B9065C4A33717914FB2A61B44A720E8F4FE1E359F5AB03B0FBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773434793, "uuid": "7a278957-4b00-4513-9aea-8e227e795e35", "value": "192:cCu/K6nC4hvZ5mzj7V7jiDDDM79E44+TLO:+C4hvZ5mzjB7joDg79E4e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773434793, "uuid": "bb0c1ad5-9f1b-4f15-ae99-8dad74412f40", "value": 14688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773434793, "uuid": "65434e2c-5b9a-45b5-a0aa-c249df4c15ac", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9388c797-1f21-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773436449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773436449, "uuid": "da98121f-4427-4079-ad7e-9efa3f44430d", "comment": "Malware payload (Mirai)", "value": "467155a9319a53cf9e0df2ec038e154d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773436449, "uuid": "f974bda4-b393-40c8-84f0-b8a86cae001e", "comment": "Malware payload (Mirai)", "value": "c5c3709784f13a6ee6de0e69099f3bb53ce4d40ac5578e769da8adc76328ef8d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773436449, "uuid": "99fcb8d7-43da-42df-b82d-3eaf68b772ce", "value": "T178F30A56F881CB11D5C111BAFE1E514E33132B78E2DE7212BD246F3C7B8A86B0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773436449, "uuid": "57f6f56c-9e42-492d-ac04-7c9605faa5bf", "value": "3072:SyhBCC9UsRtF+XzOFgHiaWqNZe67MFZ50I35CBg0f3x989:9BCC9fl+X6FgCaXDKZ50a4gy3xk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773436449, "uuid": "1ae400e6-1e05-4527-a01f-a8a0ed334632", "value": 169724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773436449, "uuid": "8e25406f-6567-4cf1-bc9d-2d24df541720", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e155425-ed79-11f0-8990-82aee05be84a", "comment": "Malware payload (BRAT)", "timestamp": 1773444615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773444615, "uuid": "4fb3eb1d-d0dc-4a45-8508-c1491aad7ead", "comment": "Malware payload (BRAT)", "value": "423cf5ddbe13df64594385b8fd519cc7", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773444615, "uuid": "8444a633-3db5-47b9-bab8-c0f83b79f171", "comment": "Malware payload (BRAT)", "value": "165c77e0cb3fc6551babc2de99e0c5182fb86e20ac3354da7ae980b580721049", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773444615, "uuid": "4a2af302-eb91-4d35-8991-8bec562f1999", "value": "T157867C43EC9159E9C1A9A33089A79253BB71BC481B3223D72B90F7392F76BD06E753", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773444615, "uuid": "aa21baad-c9dc-4fd0-b9ef-19069841c832", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773444615, "uuid": "4ca0ba9f-2af4-4740-b70a-6bc63e2017c0", "value": "98304:G3T2h9PPeJzgg3ty1qOMGUjEBoSMeduU8gsHZVY/YK2:GjigJMg3E1qrQFM/U8gsHCYX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773444615, "uuid": "3aabeb53-143d-41da-8054-1d6d24c75166", "value": 8346112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773444615, "uuid": "5fd2f20b-f85d-48f8-b18b-2ed78e771900", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773360129, "uuid": "e110d9a2-1e6f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ohqr.migratetulle.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773360912, "uuid": "b41e73d8-1e71-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.50.70:47839/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773361027, "uuid": "f86b8fd0-1e71-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://scarnetwor.liberalpilka.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773361282, "uuid": "90ae2231-1e72-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.157.61:46797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773361337, "uuid": "b123c688-1e72-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.112.134:32968/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773361447, "uuid": "f3272301-1e72-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorcoreix1.liberalpilka.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773361987, "uuid": "3496936c-1e74-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vfjpe.liberalpilka.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773362650, "uuid": "bff6d6cc-1e75-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8441193572/Na8U4Fe.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773363015, "uuid": "998e9763-1e76-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.157.61:46797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773363201, "uuid": "08890ceb-1e77-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.221.37:49271/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773363307, "uuid": "479c8284-1e77-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sannod.liberalpilka.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773363309, "uuid": "48fe106a-1e77-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/6902778688/AcjqUEy.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "VenomStealer", "colour": "#d49dec", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773363671, "uuid": "20617a62-1e78-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.219.72:59211/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773363966, "uuid": "d02202c8-1e78-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://m4nif-stack.coldcaught.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773364267, "uuid": "83e95bc6-1e79-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cratelayout.coldcaught.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773364811, "uuid": "c7bbddd7-1e7a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.221.37:49271/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773364878, "uuid": "efa18ae2-1e7a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.127.205:50926/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773365180, "uuid": "a3eaa6bd-1e7b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.219.72:59211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773365720, "uuid": "e5bc913b-1e7c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.44.248:52650/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773365766, "uuid": "0178569f-1e7d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://i0n3-graph.coldcaught.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773365771, "uuid": "041015f0-1e7d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.12.98.229:36351/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773366487, "uuid": "aeea2032-1e7e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://7xvura.coldcaught.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773366487, "uuid": "af351e9f-1e7e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.127.205:50926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773366487, "uuid": "af3aa2df-1e7e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.215:60599/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773366729, "uuid": "3f6179b1-1e7f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.44.248:52650/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773366917, "uuid": "af040ecf-1e7f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.54.232:57836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773367097, "uuid": "1a5f8403-1e80-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.227.156:52208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773367327, "uuid": "a356069e-1e80-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://closedgranite.chifdark.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773367480, "uuid": "feb698db-1e80-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.245.2:38823/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773367585, "uuid": "3d8a1574-1e81-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.215:60599/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773367927, "uuid": "0904a86c-1e82-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ipggvyss.chifdark.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773368062, "uuid": "598d3d5e-1e82-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.155.131:59635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773368541, "uuid": "775d9272-1e83-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.54.232:57836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773368960, "uuid": "70b2eb5b-1e84-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.206.207.23:60397/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773369259, "uuid": "235fdf85-1e85-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.155.131:59635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773369308, "uuid": "406f6f19-1e85-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://reel-age.chifdark.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773369561, "uuid": "d6fbc967-1e85-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.106.54:50182/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773369561, "uuid": "d726172e-1e85-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.242.6:48695/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773369744, "uuid": "43f903ff-1e86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:42177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773369913, "uuid": "a938d0fb-1e86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.103.58:39100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773370097, "uuid": "16f0a169-1e87-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.2.210:50583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773370389, "uuid": "c4c4f293-1e87-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://endpointtest.chifdark.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773370403, "uuid": "cd4893ad-1e87-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.150.165:37307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773370582, "uuid": "379d0e1b-1e88-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.103.58:39100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773370583, "uuid": "3841bce5-1e88-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.93.175:41173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371003, "uuid": "32ad7b36-1e89-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.76.176:46169/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371171, "uuid": "971b4e2a-1e89-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn-static-1.kristallwelt.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371298, "uuid": "e2b33f05-1e89-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.2.210:50583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371408, "uuid": "241fefab-1e8a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://api-node-v2.kristallwelt.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371424, "uuid": "2da0b668-1e8a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.225:37637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371724, "uuid": "e03990b2-1e8a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.150.165:37307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371905, "uuid": "4c2b77e7-1e8b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.23.65:36102/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773371950, "uuid": "674d9069-1e8b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev-test-01.kristallwelt.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773372075, "uuid": "b1a878a3-1e8b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.123:49172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773372075, "uuid": "b1f309a3-1e8b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.93.175:41173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773372319, "uuid": "42df87bb-1e8c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://s3.g.s4.mega.io/aileqac3yep7oqdhygjpberqqnk2zrnhck2lx/busket/2/03x12x26/01/OHKSFJCE.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773372561, "uuid": "d392a842-1e8c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.122.114.19/rebirth.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773372623, "uuid": "f84ad020-1e8c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.201.246:44560/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773372623, "uuid": "f86731fb-1e8c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.110:58137/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773372967, "uuid": "c56aadf3-1e8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://metrics-sync.kristallwelt.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773373035, "uuid": "eda0b9c8-1e8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.76.176:46169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773373343, "uuid": "a52bb611-1e8e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.152.245:34400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773373634, "uuid": "52c68e08-1e8f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.123:49172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773373689, "uuid": "73c79d67-1e8f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.80.188:32948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773373940, "uuid": "0958452c-1e90-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.28.103.46:60751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773374110, "uuid": "6e632fc0-1e90-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.52.213:57304/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773374348, "uuid": "fcb060ea-1e90-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.56.232.109:39091/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773374720, "uuid": "da3b0d64-1e91-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.108.90.55:59300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773375007, "uuid": "85201acd-1e92-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.110:58137/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773375079, "uuid": "b01859d0-1e92-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.80.188:32948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773375080, "uuid": "b0a38b21-1e92-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.2.23:40873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773375382, "uuid": "649f133e-1e93-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.28.103.46:60751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773375667, "uuid": "0eb8ba4b-1e94-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud-storage-5.vittoriastrada.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773376038, "uuid": "ebb58383-1e94-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.85.191:36363/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773376274, "uuid": "785e185f-1e95-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.108.90.55:59300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773376388, "uuid": "bc6ffed0-1e95-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://web-proxy-99.vittoriastrada.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773376578, "uuid": "2dcfe6db-1e96-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/wlan.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773376867, "uuid": "d9cc3a01-1e96-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://app-data-sync.vittoriastrada.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773377169, "uuid": "8da3ac76-1e97-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://link.storjshare.io/raw/jwye2z4k24dof2jumukozlephkiq/000/2/OHKSFJCE.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773377237, "uuid": "b6662b9e-1e97-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:39217/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773377350, "uuid": "f9c362f6-1e97-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.210.77.210:56521/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773377411, "uuid": "1e1f050c-1e98-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.85.191:36363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773377529, "uuid": "647c48e8-1e98-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.232:39217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773377529, "uuid": "64c0bbaf-1e98-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.226.212.168:59318/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773377590, "uuid": "88f75940-1e98-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://remote-access-v4.cielonumerique.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773377773, "uuid": "f5ac6713-1e98-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.15.15:54973/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773377830, "uuid": "17fb9eb3-1e99-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.2.23:40873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773378259, "uuid": "1751a333-1e9a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.88.137:54923/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773378983, "uuid": "c7191e56-1e9b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.210.77.210:56521/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773379049, "uuid": "ee3ed111-1e9b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.249.160:48520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773379049, "uuid": "ee7ca9de-1e9b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.161.142.194:36629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773379328, "uuid": "94af45a5-1e9c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://backend-core-7.cielonumerique.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773379344, "uuid": "9e7d135f-1e9c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.93.90:44949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773379510, "uuid": "01454902-1e9d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cache-dist-12.cielonumerique.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773379643, "uuid": "505decf2-1e9d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.198.91:46402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773380226, "uuid": "ac453f07-1e9e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://internal-dns.cielonumerique.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773380465, "uuid": "3aaa8b0b-1e9f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://power-grid-88.starkstrom.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773380484, "uuid": "4588a84f-1e9f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.212.252:34397/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773380901, "uuid": "3e2dbde8-1ea0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.249.160:48520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773381008, "uuid": "7e69207f-1ea0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://load-balancer-3.starkstrom.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773381259, "uuid": "13793105-1ea1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.198.91:46402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773381382, "uuid": "5d510a94-1ea1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.24.110:45107/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773381681, "uuid": "0f1221df-1ea2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.93.90:44949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773381969, "uuid": "bae9d9f1-1ea2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sys-monitor-x.starkstrom.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773382522, "uuid": "04bba1c6-1ea4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.104.70:43583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773382580, "uuid": "2702bb10-1ea4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.212.252:34397/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773382821, "uuid": "b6f724a6-1ea4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.36.254:46666/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773382821, "uuid": "b70b0124-1ea4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.104.4:43782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383061, "uuid": "45ff2367-1ea5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.199.177:46794/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383173, "uuid": "88c60a65-1ea5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.217.82:60056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383288, "uuid": "ccf518ae-1ea5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.246.3/35/ecg/ncoooe.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383346, "uuid": "efbc5521-1ea5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gateway-secure.starkstrom.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383347, "uuid": "f003a2d2-1ea5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.175.246.3/36/cbc/uwanttobefineforeverything.hta", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383607, "uuid": "8b77ff42-1ea6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.247.170:46350/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383720, "uuid": "ceb69526-1ea6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.46.206:44783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383776, "uuid": "f00408f9-1ea6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.40.14:58685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383905, "uuid": "3cda482d-1ea7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.166:55765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773383908, "uuid": "3e7e9f78-1ea7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.104.70:43583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773384069, "uuid": "9e9ee244-1ea7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://office-link-0.petitbureau.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773384397, "uuid": "623ba6bc-1ea8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.183.223:33780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773384484, "uuid": "9620e02b-1ea8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.0.72.159:50274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773384497, "uuid": "9e05d72c-1ea8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.104.4:43782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773384498, "uuid": "9e8edc0c-1ea8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.36.254:46666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773384624, "uuid": "e9453071-1ea8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.90.241:60192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773384668, "uuid": "03793a29-1ea9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://work-flow-v2.petitbureau.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773384683, "uuid": "0c845e65-1ea9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.166:55765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773384738, "uuid": "2d58bca7-1ea9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.15.15:54973/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773384793, "uuid": "4de275df-1ea9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.90.235:37904/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773384857, "uuid": "74738bcc-1ea9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.90.235:37904/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773385030, "uuid": "db871b1e-1ea9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.217.82:60056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773385090, "uuid": "ff41f2db-1ea9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.247.170:46350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773385336, "uuid": "91c802cb-1eaa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.40.14:58685/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773385410, "uuid": "bdaa4208-1eaa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.251.154:42746/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773385458, "uuid": "da75da55-1eaa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.118:33750/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773385460, "uuid": "dbc09189-1eaa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.183.223:33780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773385807, "uuid": "aac4bda1-1eab-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://staff-portal-5.petitbureau.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773386166, "uuid": "80a42419-1eac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://local-hub-test.petitbureau.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773386293, "uuid": "cc635c72-1eac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.154.248:33965/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773386408, "uuid": "10fb4c49-1ead-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://global-net-1.mondosolido.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773386484, "uuid": "3e3e6462-1ead-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.199.58:44047/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773387009, "uuid": "76c7ab31-1eae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.251.154:42746/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773387012, "uuid": "788b2a42-1eae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.118:33750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773387319, "uuid": "2fcbe45a-1eaf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.138.61:56065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773388279, "uuid": "6bedefab-1eb1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.199.58:44047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773388331, "uuid": "8b1ca7de-1eb1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.229.54.188:47305/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773388521, "uuid": "fc0e68f4-1eb1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.94.16:60189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773388697, "uuid": "654d575c-1eb2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.215.117:44017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773388809, "uuid": "a82ee0ac-1eb2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.138.61:56065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773388814, "uuid": "aa9f57e7-1eb2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-infra-9.mondosolido.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773388886, "uuid": "d5bf0201-1eb2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.89.131:56735/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773388900, "uuid": "ddf015dc-1eb2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.162.80.79:56772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773389121, "uuid": "61c46966-1eb3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.84.222.217:29218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773389167, "uuid": "7d56ec67-1eb3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7769977063/H7DC3me.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773389709, "uuid": "c09d7078-1eb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-base-v3.mondosolido.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773389723, "uuid": "c8cccd4c-1eb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.196.85:55661/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773389965, "uuid": "58e21caf-1eb5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.229.54.188:47305/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773390128, "uuid": "b9e7c692-1eb5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-entry.mondosolido.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773390261, "uuid": "094ccb8d-1eb6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:52510/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773390433, "uuid": "6fe7ccce-1eb6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.243.13:53957/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773390446, "uuid": "77eab1c9-1eb6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.215.117:44017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773390487, "uuid": "8fc43023-1eb6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://alpha-trace-0.cybergeist.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773390546, "uuid": "b36dcd7b-1eb6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wmfkj2w9.oakbit.digital/?=check&&actmn=GAiFjXJbNetrplnn", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773390798, "uuid": "49945f27-1eb7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.89.73:58535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773390859, "uuid": "6dcc86e0-1eb7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.247:36369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773390908, "uuid": "8b434d6c-1eb7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-shell-77.cybergeist.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773391107, "uuid": "01ba5638-1eb8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.94.16:60189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773391291, "uuid": "6f088244-1eb8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.87.139:57425/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773391336, "uuid": "8a64648a-1eb8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.196.85:55661/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773391643, "uuid": "40ffeb59-1eb9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.243.13:53957/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773391752, "uuid": "8239fa67-1eb9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8115221351/c8hckRF.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773391764, "uuid": "88eb1909-1eb9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.101:58545/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773392063, "uuid": "3b70176f-1eba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.73.5:33732/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773392120, "uuid": "5d400bf2-1eba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.19.33:54004/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773392238, "uuid": "a3dc7760-1eba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.255.247:36369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773392289, "uuid": "c20450f4-1eba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://user-auth-x2.cybergeist.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773392782, "uuid": "e7e00fcf-1ebb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.72:42957/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773393008, "uuid": "6ea00bfc-1ebc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ghost-node.cybergeist.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773393081, "uuid": "99e9813e-1ebc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.189.250:52964/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773393247, "uuid": "fd28535d-1ebc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-room-v8.nachtlicht.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773393259, "uuid": "0438a2e9-1ebd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.101:58545/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773393315, "uuid": "25919336-1ebd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.87.139:57425/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773393341, "uuid": "3508a9ab-1ebd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.16.168:35247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773393375, "uuid": "497450e0-1ebd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.73.5:33732/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773393441, "uuid": "70939e9c-1ebd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.37:44720/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773393550, "uuid": "b1c78f35-1ebd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://light-bridge-4.nachtlicht.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773393862, "uuid": "6bc7119c-1ebe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.252.249:57729/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773393908, "uuid": "87022625-1ebe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://scan-point-21.nachtlicht.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773393978, "uuid": "b10819cb-1ebe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.19.33:54004/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773394210, "uuid": "3b495b6c-1ebf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vision-sync.nachtlicht.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773394342, "uuid": "89cce65c-1ebf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.72:42957/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773394659, "uuid": "4706c080-1ec0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.16.168:35247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773394756, "uuid": "8082a028-1ec0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.37:44720/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773394759, "uuid": "824c5702-1ec0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.71.90:40802/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773395409, "uuid": "05d463fb-1ec2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://outer-rim-9.grandespace.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773395419, "uuid": "0b7ce328-1ec2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.119:43420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773395546, "uuid": "579c6860-1ec2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.55.219:51951/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773395610, "uuid": "7dc2e9f3-1ec2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.55.219:51951/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773395709, "uuid": "b870cc69-1ec2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7769977063/H7DC3me.bat", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773395780, "uuid": "e2de9b79-1ec2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.182.252.249:57729/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773395947, "uuid": "465aaf2f-1ec3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://area-zone-55.grandespace.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773396254, "uuid": "fd70a304-1ec3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.71.90:40802/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773396316, "uuid": "2278b8dd-1ec4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.82.79:33819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773396546, "uuid": "abcb546d-1ec4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vast-field-01.grandespace.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773396610, "uuid": "d1993f98-1ec4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.182:43407/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773396787, "uuid": "3b681831-1ec5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-space-v.grandespace.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397036, "uuid": "cfa31829-1ec5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.119:43420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397514, "uuid": "ec3393c6-1ec6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.240.131:50080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397628, "uuid": "309c3820-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://moon-orbit-3.ferroluna.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397688, "uuid": "540cd49e-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.68.76:54886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397747, "uuid": "772b13c9-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/mu126-afk/um/main/ud.txt", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397747, "uuid": "772b9ca1-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/m1-nc/roukii/main/ud.txt", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397751, "uuid": "79947f49-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/m1-nc/roukii/raw/main/up.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397751, "uuid": "79e8b3bd-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/m1-nc/roukii/main/m1-nc.zip", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397751, "uuid": "7a00cb55-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/m1-nc/roukii/raw/main/m1-nc.zip", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397752, "uuid": "7a9a6050-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/m1-nc/roukii/main/up.png", "Tag": [ { "name": "Braodo", "colour": "#6246e6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397758, "uuid": "7dcbc934-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.23.36:46066/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397809, "uuid": "9c5c4afc-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8520831842/YMUeQHk.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773397878, "uuid": "c57f60b9-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.59.146:37551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773398059, "uuid": "310b6395-1ec8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.82.79:33819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773398300, "uuid": "c0e0ecbe-1ec8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.93.182:43407/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773398529, "uuid": "495abe2e-1ec9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://steel-base-9.ferroluna.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773398537, "uuid": "4dfb0de7-1ec9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.202:57533/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773398841, "uuid": "032bf69f-1eca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.23.36:46066/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773398889, "uuid": "1fe2438d-1eca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rock-core-v7.ferroluna.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773399188, "uuid": "d2505c2d-1eca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sat-uplink.ferroluna.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773399379, "uuid": "43ea364c-1ecb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.202:57533/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773399397, "uuid": "4f0f76b4-1ecb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.242.97:36317/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773399507, "uuid": "9034f7c4-1ecb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.52.213:57304/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773399847, "uuid": "5af627fe-1ecc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/unique5/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773400090, "uuid": "ebe0127b-1ecc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.164.121:49924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773400743, "uuid": "710502cc-1ece-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.190.240.131:50080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773400931, "uuid": "e15ad566-1ece-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.242.97:36317/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773401180, "uuid": "75aa3e78-1ecf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.59.146:37551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773401419, "uuid": "04122581-1ed0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.26.253:47895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773401528, "uuid": "44f1e653-1ed0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.24.229:56080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773401597, "uuid": "6e013187-1ed0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:52510/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773401956, "uuid": "4469f813-1ed1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.215:55548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773401959, "uuid": "45a74ea4-1ed1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.124.215:35504/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773402199, "uuid": "d4f988dd-1ed1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.235.41:41350/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773402203, "uuid": "d76869d1-1ed1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.163.0:42462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773402381, "uuid": "41333d6d-1ed2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.135.129.29:38802/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773402728, "uuid": "107442ca-1ed3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://iceevery.whitebus.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773402865, "uuid": "6225ba0b-1ed3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.185.187:43028/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773402910, "uuid": "7caa5f59-1ed3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.26.253:47895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773402911, "uuid": "7d2d0cd3-1ed3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.34.102:41232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773403148, "uuid": "0a8052a2-1ed4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://criloya.whitebus.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773403459, "uuid": "c3b11aab-1ed4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.24.229:56080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773403514, "uuid": "e47c3127-1ed4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.163.0:42462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773403753, "uuid": "7326fc9b-1ed5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://catalogmonitor.whitebus.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404054, "uuid": "265c8909-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.206.207.23:60397/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404227, "uuid": "8e02dcfb-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/BkVZexp8", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404228, "uuid": "8e5b9620-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/Q587VyxQ", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404228, "uuid": "8e6ab1e0-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/xgWysJ8V", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404228, "uuid": "8e6fe7ab-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/CPsxYmsY", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404228, "uuid": "8e7eabbc-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/49Te3xW9", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404228, "uuid": "8e7ec796-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/ciSqK9Rp", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404228, "uuid": "8e86ec7e-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/LH5Gz7Vx", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404228, "uuid": "8e93afa7-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/kyZ7PbSQ", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404228, "uuid": "8e93c103-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/1YAn6rSV", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404289, "uuid": "b282ea8f-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.10.74:60629/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404289, "uuid": "b2de420d-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.124.63.200/main_mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404290, "uuid": "b332987f-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pizzatang.net/xyz.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404292, "uuid": "b44f4338-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pamellioty.com/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404293, "uuid": "b4cd8d72-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gkgkgkgff.sbs/TikTok18.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404293, "uuid": "b4f2efad-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pardu.pages.dev/pardufrigi_installer_1.0.p1.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404293, "uuid": "b4f6f48b-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tux.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404293, "uuid": "b507fdab-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tux.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404293, "uuid": "b5318c3f-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tux.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404294, "uuid": "b5630392-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tux.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404294, "uuid": "b56eabfe-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tux.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404294, "uuid": "b5f5cd13-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tux.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404295, "uuid": "b62d9fc4-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tux.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404295, "uuid": "b6333fdc-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tux.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404295, "uuid": "b635848b-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tux.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404296, "uuid": "b6fceb79-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tux.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404296, "uuid": "b6fcfa86-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tux.arm4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404297, "uuid": "b76cd3d5-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vsdvsdvasvf.sbs/TikTok18.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404299, "uuid": "b8a655d4-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.135.129.29:38802/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404300, "uuid": "b932b851-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bgsgroup.com.ar/c/Doc_902838.msi", "Tag": [ { "name": "XFilesStealer", "colour": "#c26ef2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404347, "uuid": "d5001fb1-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tux.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404361, "uuid": "dd704b03-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.168.158:33841/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404420, "uuid": "00bacaf5-1ed7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.239.81.126:43905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404532, "uuid": "436c8f23-1ed7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.72.254:36511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404721, "uuid": "b3e67762-1ed7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.203.52:35767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773404948, "uuid": "3b94cf1b-1ed8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.68.76:54886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773405199, "uuid": "d1549b44-1ed8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.5.234:58292/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773405321, "uuid": "19e3c176-1ed9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.239.81.126:43905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773405323, "uuid": "1af7887b-1ed9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.145.48:51079/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773405553, "uuid": "a443245e-1ed9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.72.254:36511/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773405860, "uuid": "5b5bdece-1eda-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.193.168.158:33841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773405861, "uuid": "5bd8e6ee-1eda-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.167.5:39723/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773406212, "uuid": "2d1bd5c7-1edb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.203.52:35767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773406748, "uuid": "6c853fb9-1edc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://l2mk50mf.rednet.digital/?=check&&actmn=tVXUFUzZyRMztPfM", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773407121, "uuid": "4ab425b8-1edd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.205.201:33629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773407125, "uuid": "4d4a6a16-1edd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.161.166.159:51393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773407593, "uuid": "642432ec-1ede-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.76.99:54743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773407649, "uuid": "856ad16a-1ede-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.31.72:34322/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773407731, "uuid": "b62c37ba-1ede-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.167.5:39723/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773407776, "uuid": "d13990e0-1ede-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.31.72:34322/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773407902, "uuid": "1c4b21db-1edf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.5.234:58292/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408080, "uuid": "8691ec19-1edf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.99.248:40474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408133, "uuid": "a60f2bf1-1edf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.73/oxpdxnaob113/assets/js/4bonx494kg?token=sZJUJ8lMq4yzsZuO5oJu1gjt8HZxTFG3", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408133, "uuid": "a60f2f0a-1edf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.73/oxpdxnaob113/assets/js/tjyhj7uvnn?token=sZJUJ8lMq4yzsZuO5oJu1gjt8HZxTFG3", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408133, "uuid": "a60f5f76-1edf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.73/oxpdxnaob113/assets/js/hk9r4h7dm6?token=sZJUJ8lMq4yzsZuO5oJu1gjt8HZxTFG3", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408258, "uuid": "f0706cd4-1edf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.169.1:39627/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408555, "uuid": "a1a6efb3-1ee0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.161.166.159:51393/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408796, "uuid": "30fd464c-1ee1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.76.99:54743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "57f68f23-1ee1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.58/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "57fcad18-1ee1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.58/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "57fcb340-1ee1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.58/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "57fcc119-1ee1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.58/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "57fd0ce6-1ee1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.58/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "57ff4c76-1ee1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.58/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "57ffd27f-1ee1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.58/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408861, "uuid": "5814dec8-1ee1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408862, "uuid": "58332b80-1ee1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.196.32.55/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773408919, "uuid": "7a18e749-1ee1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.171.192:35097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773409150, "uuid": "03c95ae3-1ee2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.205.201:33629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773409151, "uuid": "04a7c764-1ee2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.111.183:54467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773409216, "uuid": "2b3536c9-1ee2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.67.162:46642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773409868, "uuid": "afdac5e9-1ee3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://uzpjxi.whitebus.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773410179, "uuid": "69367ecc-1ee4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.22.154:60301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773410228, "uuid": "86555b5b-1ee4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.171.192:35097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773410847, "uuid": "f778b546-1ee5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.111.183:54467/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773410915, "uuid": "204ffd0e-1ee6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.254.114:42745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773411187, "uuid": "c24c29e2-1ee6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8635093259/TUzr0QP.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773411261, "uuid": "ee7d50fc-1ee6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.67.162:46642/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773411328, "uuid": "167523a0-1ee7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.22.154:60301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773411728, "uuid": "04ea2679-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rich-wave.gontake.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773411790, "uuid": "2982a90e-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.mediafire.com/file_premium/423zmn9cb2cubtf/SSA_E-FILE_%252825%2529.vbs/file", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773411796, "uuid": "2d6ae067-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.112.190/COURT_ORDER_AGENT_473850_V10_14_4_RW.EXE", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "N-able", "colour": "#93E182", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773411797, "uuid": "2daf25a1-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://144.172.102.83/ssa_estatement.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773411798, "uuid": "2e3b18fd-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://216.126.225.120/SSA_ADMIN_ESTATEMENT.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "DattoRMM", "colour": "#167832", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773411812, "uuid": "36b4a516-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://172.86.116.238/ssa_em_YgJHJTuo_installer_Win7-Win11_x86_x64.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773411923, "uuid": "78c5e731-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.199.189:57315/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412135, "uuid": "f7906858-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://docinstall.top/new/LogM.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412152, "uuid": "017cc750-1ee9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://217.156.65.56/new/LogM.msi", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412224, "uuid": "2c12eef5-1ee9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.182:44010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412225, "uuid": "2d10a4e3-1ee9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.158.89:54210/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412527, "uuid": "e101813e-1ee9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.235.223.51:51326/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412574, "uuid": "fd1a746d-1ee9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.73/oxpdxnaob113/assets/js/tjyhj7uvnn", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412575, "uuid": "fd4390dc-1ee9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.73/oxpdxnaob113/assets/js/qjzu1ipbfu", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412575, "uuid": "fd639378-1ee9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.73/oxpdxnaob113/assets/js/d8o7xu71em", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412575, "uuid": "fd73aee5-1ee9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.73/oxpdxnaob113/assets/js/nfrqbh0ttz", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412575, "uuid": "fd7bad6e-1ee9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.73/oxpdxnaob113/assets/js/nnzlphr2vt", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412588, "uuid": "0508dbf5-1eea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.73/oxpdxnaob113/assets/js/4bonx494kg", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412588, "uuid": "05214e13-1eea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.73/oxpdxnaob113/assets/js/hk9r4h7dm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412588, "uuid": "054349f5-1eea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.73/oxpdxnaob113/assets/js/kcd5v195q5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412589, "uuid": "05da78dc-1eea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.73/oxpdxnaob113/assets/js/0twxt1rqmy", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773412589, "uuid": "05e6b521-1eea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.73/oxpdxnaob113/assets/js/a7nuhf01jq", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773413181, "uuid": "668e2be5-1eeb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.230.184:53535/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773413315, "uuid": "b6996282-1eeb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.213.171:47005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773413485, "uuid": "1be17f39-1eec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.230.184:53535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773413805, "uuid": "daad0727-1eec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.255.106.148:55299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773414083, "uuid": "80775490-1eed-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.199.189:57315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773414264, "uuid": "ec7f5f9f-1eed-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:47593/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773415222, "uuid": "2733edd8-1ef0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.40.143:42593/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773415530, "uuid": "df25f56c-1ef0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.255.106.148:55299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773415566, "uuid": "f497ec1b-1ef0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://woupp.com/curl/cebf178be06dfca56487bdc83ca5c28340b4a3da0f157128bac6142cad1b36be", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773415567, "uuid": "f4b1187e-1ef0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.94.9.224/9cca20c6df659f72/m_cpt1267381.bin", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773415831, "uuid": "9231780e-1ef1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.126.169:50496/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416001, "uuid": "f7e229ea-1ef1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.181.77:39005/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416551, "uuid": "3f6ee781-1ef3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.9:47593/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416591, "uuid": "57519f72-1ef3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8167064937/BB3UGoE.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416597, "uuid": "5aa23098-1ef3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.253.105:39197/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416597, "uuid": "5abbc9de-1ef3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.40.143:42593/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416606, "uuid": "6041ec35-1ef3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.126.169:50496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416725, "uuid": "a6f8aec8-1ef3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.240.201:34782/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416748, "uuid": "b4b2e7eb-1ef3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.251:46844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773416839, "uuid": "eacb5f7b-1ef3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.147.209:60996/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773417427, "uuid": "494dd20b-1ef5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8535406641/AYRS45O.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773417550, "uuid": "92a49b63-1ef5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.240.201:34782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773418148, "uuid": "f75028e0-1ef6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.242.9:49065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773418213, "uuid": "1e56811e-1ef7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.103.86.150:39914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773418403, "uuid": "8f7e731c-1ef7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.181.87:53312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773418452, "uuid": "ac63b7f0-1ef7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.147.209:60996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773418631, "uuid": "17234b6e-1ef8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.147.30:59996/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773418891, "uuid": "b25dc67c-1ef8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.115.113:52478/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773418927, "uuid": "c7a9c7f3-1ef8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8468794285/dSBZqK0.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773419062, "uuid": "17f39ba3-1ef9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.251:46844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773419117, "uuid": "38951b8f-1ef9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.242.9:49065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773419348, "uuid": "c2a15ea6-1ef9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:42177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773419528, "uuid": "2e1130d6-1efa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/1781548144/okR3iq0.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773419597, "uuid": "5702d59c-1efa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.147.30:59996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773419833, "uuid": "e3c3ee6e-1efa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.103.86.150:39914/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773420434, "uuid": "49fff179-1efc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.115.113:52478/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773420615, "uuid": "b58ca2fb-1efc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.230.180:50648/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773420925, "uuid": "6e8e3270-1efd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.230.180:50648/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773421337, "uuid": "63d0cd6a-1efe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.88.237:46387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773422180, "uuid": "5aa3135f-1f00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.60.181.77:39005/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773422470, "uuid": "0760c43a-1f01-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:48716/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773423079, "uuid": "723a2b92-1f02-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.84.118:36466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773423246, "uuid": "d5db6515-1f02-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7782139129/DqzayUy.msi", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773423311, "uuid": "fcbb5e7a-1f02-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://48leal.gontake.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773423679, "uuid": "d803c956-1f03-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:48716/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773424228, "uuid": "1f14a656-1f05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.95.214.29:38175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773424877, "uuid": "a23653c2-1f06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.91:52598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773425047, "uuid": "07475670-1f07-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://visuavital.gontake.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773425060, "uuid": "0f0ccf0c-1f07-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.124:46551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773425109, "uuid": "2c337115-1f07-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.124:46551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773426019, "uuid": "4ac2637d-1f09-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.88.34:46280/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773426189, "uuid": "b0406ff1-1f09-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tri-nexos.gontake.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773426727, "uuid": "f08d3f98-1f0a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://k97iydxz.gorun.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773427099, "uuid": "ce42f309-1f0b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.105.169:34906/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773427147, "uuid": "eb29a66b-1f0b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://opticparcel.gorun.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773427161, "uuid": "f3764602-1f0b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.15.224:59698/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773427397, "uuid": "8052588b-1f0c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.97.100.192:40017/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773427875, "uuid": "9d16d90a-1f0d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.73/ohno.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773427927, "uuid": "bc22a05a-1f0d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://delivelagoo.gorun.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773428060, "uuid": "0b5b7895-1f0e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.178.199:34499/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773428114, "uuid": "2b7cb22d-1f0e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.88.34:46280/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773428170, "uuid": "4d2851bf-1f0e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.227.85.74:33976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773428171, "uuid": "4d75057a-1f0e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.16.7:40051/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773428478, "uuid": "04be42a9-1f0f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.97.100.192:40017/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773428527, "uuid": "21f33033-1f0f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://otyhyn.gorun.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773428540, "uuid": "29a0ff3f-1f0f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.105.169:34906/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773428899, "uuid": "ff7565c6-1f0f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.15.224:59698/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773428947, "uuid": "1c17866c-1f10-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.250.238.6:59446/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773429018, "uuid": "4626a9b1-1f10-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.91:52598/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773429191, "uuid": "ada0abe2-1f10-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.178.199:34499/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773429487, "uuid": "5e0f088d-1f11-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://marshlagoon.stayflat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773429908, "uuid": "58f8fe6e-1f12-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://organizecourier.stayflat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773429909, "uuid": "596e7591-1f12-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.16.7:40051/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773429981, "uuid": "841de43b-1f12-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.98.26:37055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773430211, "uuid": "0d5d8300-1f13-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.224.2:37552/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773430342, "uuid": "5b74c733-1f13-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.250.238.6:59446/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773430448, "uuid": "9aacd9f9-1f13-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://exposedemand.stayflat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773430454, "uuid": "9e704f95-1f13-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.231.56:55722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773430630, "uuid": "070691f2-1f14-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.176:33118/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773430995, "uuid": "e0ae6ce5-1f14-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.185.187:43028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773431173, "uuid": "4a930118-1f15-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.211.106:60776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773431708, "uuid": "89cd5778-1f16-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zendraix.stayflat.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773431719, "uuid": "90675bec-1f16-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.224.2:37552/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773431946, "uuid": "17cce3c0-1f17-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn-static-2.sturmwelle.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773432200, "uuid": "aeb3621b-1f17-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.176:33118/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773432375, "uuid": "17276a81-1f18-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.17:49633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773432509, "uuid": "671baf71-1f18-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.211.106:60776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773432570, "uuid": "8b8b1a43-1f18-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.205:60555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773433208, "uuid": "07a3539b-1f1a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dev-test-node.sturmwelle.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773433763, "uuid": "525a8db8-1f1b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.17:49633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773433764, "uuid": "532d08ae-1f1b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.90:41401/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773434109, "uuid": "208eb245-1f1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud-storage-b.fortezzablu.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773434117, "uuid": "25c5565a-1f1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.90:41401/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773434235, "uuid": "6c1d86dc-1f1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.205:60555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773434949, "uuid": "1575ccfe-1f1e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv-cluster-7.fortezzablu.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773435030, "uuid": "45ec6f15-1f1e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.240.109:33071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773435368, "uuid": "0f212775-1f1f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://web-proxy-88.fortezzablu.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773435516, "uuid": "67967956-1f1f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.50.239:55790/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773435727, "uuid": "e569093d-1f1f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://app-data-log.fortezzablu.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773436280, "uuid": "2f05f195-1f21-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.253.16:43935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773436283, "uuid": "30d88690-1f21-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.231.184:43361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773436328, "uuid": "4b4025a4-1f21-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7115306239/fcFbEDc.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773436517, "uuid": "bc18a3c2-1f21-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.45:38217/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773436630, "uuid": "ff448951-1f21-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://remote-access-v1.vitagrazia.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773436821, "uuid": "713b49b3-1f22-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.240.109:33071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773437062, "uuid": "0132a9c6-1f23-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.50.239:55790/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773437183, "uuid": "49414866-1f23-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.16:38394/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773437428, "uuid": "db0d40d2-1f23-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.171.21:45773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773437482, "uuid": "fb15e99c-1f23-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.196.142:52636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773437528, "uuid": "16d01492-1f24-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://backend-core-x.vitagrazia.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773437659, "uuid": "64cf20f3-1f24-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.65.239:34628/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773437904, "uuid": "f6d823bc-1f24-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.253.16:43935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773437959, "uuid": "17df7e34-1f25-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.guru/s/PoyRqQGf?repo_name=.github", "Tag": [ { "name": "pw-k53mv9bc", "colour": "#c88d98", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773438081, "uuid": "600b658f-1f25-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.231.184:43361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773438081, "uuid": "606e2faa-1f25-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.93.245:55879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773438488, "uuid": "52b69765-1f26-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cache-dist-5.vitagrazia.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773438742, "uuid": "ea67ff21-1f26-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.75.34:55879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773438967, "uuid": "7059bfc4-1f27-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.205.35:50273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773439096, "uuid": "bd06714a-1f27-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.196.142:52636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773439338, "uuid": "4d97f83b-1f28-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.48/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773439338, "uuid": "4d99bf05-1f28-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.48/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773439338, "uuid": "4d9aedb1-1f28-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.48/i586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773439338, "uuid": "4daae17d-1f28-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.48/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773439338, "uuid": "4daaf238-1f28-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.48/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773439338, "uuid": "4db3729f-1f28-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.48/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773439343, "uuid": "5091e2f9-1f28-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.48/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773439387, "uuid": "6abdfed6-1f28-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.48/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773439387, "uuid": "6abff26f-1f28-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.48/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773439520, "uuid": "b9ed4690-1f28-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.242.166:55640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773439929, "uuid": "ada4b635-1f29-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.93.245:55879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773440230, "uuid": "610cdcf3-1f2a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.75.34:55879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773440290, "uuid": "84dbe567-1f2a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.175.154:40306/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773440347, "uuid": "a6b4640c-1f2a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://internal-dns-2.vitagrazia.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773440467, "uuid": "ee75c092-1f2a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://office-link-1.espacerapide.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773440588, "uuid": "36685fa4-1f2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8012574236/4aMmUA4.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773440648, "uuid": "5a4e058e-1f2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.205.35:50273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773441009, "uuid": "3188cf69-1f2c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://work-flow-v3.espacerapide.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773441551, "uuid": "7499f069-1f2d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.242.166:55640/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773441552, "uuid": "753d9986-1f2d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.144.57:58198/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773442035, "uuid": "951da17c-1f2e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.16:38394/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773442087, "uuid": "b4084f4d-1f2e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.175.154:40306/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773442087, "uuid": "b40cf88e-1f2e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://local-hub-sec.espacerapide.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773442152, "uuid": "da8bd706-1f2e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.89.172:50462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773442220, "uuid": "0318c9b6-1f2f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.28.103.46:51627/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773442508, "uuid": "af20d5f3-1f2f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://global-net-2.mondoluce.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773442691, "uuid": "1bd96c50-1f30-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/idlecash/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773442702, "uuid": "2278ac87-1f30-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.218.246:44369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773442930, "uuid": "aaa4c2f1-1f30-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/swissmet/FiveM-Spoofer/raw/refs/heads/main/CFXBypass.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773442938, "uuid": "af52f136-1f30-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.203.144.57:58198/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773442990, "uuid": "ce5b6eee-1f30-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.68.52:46114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773443112, "uuid": "1727b599-1f31-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Fortnite-Cheat-Aimbot-ESP-2026/.github/releases/download/Latest/Launcher.zip", "Tag": [ { "name": "pw-2026", "colour": "#4d3d79", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773443287, "uuid": "7f30d650-1f31-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-infra-5.mondoluce.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773443588, "uuid": "32d28a21-1f32-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Stepheen/raw/raw/refs/heads/main/Launcher.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773443649, "uuid": "56f4ed10-1f32-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Stepheen/raw/refs/heads/main/Launcher.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773443655, "uuid": "5ae2d727-1f32-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.28.103.46:51627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773443709, "uuid": "7b07be19-1f32-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-base-v4.mondoluce.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773443717, "uuid": "7fdd7ec3-1f32-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.89.172:50462/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773444069, "uuid": "5129a9a8-1f33-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-entry-1.mondoluce.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773444089, "uuid": "5d117007-1f33-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/data/?KIDDIONSMODMENU", "Tag": [ { "name": "pw-NMCLDJX3SK2", "colour": "#7c9ccf", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773444371, "uuid": "053b56f9-1f34-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://alpha-trace-x.kaltesystem.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773444428, "uuid": "27709816-1f34-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.68.52:46114/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773444615, "uuid": "96d3309d-1f34-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/aemmr/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773444731, "uuid": "dbdfd910-1f34-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.252.138:45181/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773444787, "uuid": "fd98f39a-1f34-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-shell-11.kaltesystem.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773444850, "uuid": "2317ebe2-1f35-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.250.45:41823/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773444917, "uuid": "4ae4d1c6-1f35-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.252.138:45181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773445044, "uuid": "96c2a11a-1f35-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/load-xod/urban-octo/releases/download/09-03-2026/Silent_Utility_V4.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773445097, "uuid": "b6152832-1f35-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/load-xod/urban-octo/releases/download/08-03-2026/Silent_Utility_V4.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773445098, "uuid": "b6b16bd5-1f35-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/load-xod/urban-octo/releases/download/08-03-2026app/App-Initializer.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773445517, "uuid": "b0862aa0-1f36-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.56.253:43744/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773445698, "uuid": "1c271906-1f37-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.81.215:42388/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773445747, "uuid": "399faefa-1f37-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://user-auth-v8.kaltesystem.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773445998, "uuid": "ceec90f6-1f37-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.169.46:60465/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773446290, "uuid": "7cf66c21-1f38-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.250.45:41823/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773393845, "uuid": "61d5c3b0-1ebe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.182.252.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773436265, "uuid": "259a96b9-1f21-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.186.231.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371406, "uuid": "2315f888-1e8a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.52.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773413765, "uuid": "c312448d-1eec-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.255.106.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773363666, "uuid": "1d9d5364-1e78-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.219.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773363186, "uuid": "ff5e8d95-1e76-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.221.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773418145, "uuid": "f546cd47-1ef6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.242.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773432365, "uuid": "114b9f61-1f18-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.251.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773436265, "uuid": "259a65e3-1f21-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.253.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773373326, "uuid": "9b182f5c-1e8e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.152.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773416706, "uuid": "9b919a86-1ef3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.240.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773377766, "uuid": "f19b3572-1e98-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.15.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773402906, "uuid": "7a368688-1ed3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.34.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404345, "uuid": "d42fd25f-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.193.168.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773383047, "uuid": "3d5d752b-1ea5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.199.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773441545, "uuid": "70eaec06-1f2d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.203.144.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773437407, "uuid": "ce80296a-1f23-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.171.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773435006, "uuid": "37b50a23-1f1e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.240.109", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773401405, "uuid": "fbc0a6c8-1ecf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.26.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773418625, "uuid": "13b1f3df-1ef8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.147.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773418383, "uuid": "839c739d-1ef7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.181.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773384365, "uuid": "4f08ae4b-1ea8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.183.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773395525, "uuid": "4ae782e5-1ec2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.55.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773386465, "uuid": "330e7281-1ead-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.199.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404707, "uuid": "abc0a6ec-1ed7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.203.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773390425, "uuid": "6aed7081-1eb6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.243.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773400085, "uuid": "e8c53bbf-1ecc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.164.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773402846, "uuid": "568bd7c7-1ed3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.185.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773402185, "uuid": "cc8874dc-1ed1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.235.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773413285, "uuid": "a4a0cba1-1eeb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.84.213.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773375064, "uuid": "a72020ce-1e92-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.2.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773407585, "uuid": "5f78acf5-1ede-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.76.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773405845, "uuid": "523425be-1eda-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.132.167.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773416825, "uuid": "e2b4fa96-1ef3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.147.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773397744, "uuid": "75daf978-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.23.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773370565, "uuid": "2de737da-1e88-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.93.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773388867, "uuid": "ca7e5fe9-1eb2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.162.80.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773378966, "uuid": "bd01b673-1e9b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.161.142.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773407106, "uuid": "41e1c76d-1edd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.161.166.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773430207, "uuid": "0ae0661f-1f13-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.224.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773379026, "uuid": "e0a21493-1e9b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.249.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773444845, "uuid": "1facc7ec-1f35-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.250.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773361265, "uuid": "865d304d-1e72-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.157.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773383166, "uuid": "845537b9-1ea5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.217.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773411787, "uuid": "27ec12c5-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.102.83", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773411787, "uuid": "27ebf226-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.172.112.190", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "N-able", "colour": "#93E182", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408846, "uuid": "4ed8a6d9-1ee1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.208.58", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773411787, "uuid": "27ebfa87-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.86.116.238", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773415566, "uuid": "f44a95ae-1ef0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.94.9.224", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773384365, "uuid": "4f08c6a7-1ea8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.0.72.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773412205, "uuid": "2137d770-1ee9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.158.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773405307, "uuid": "11a696c2-1ed9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.145.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773410166, "uuid": "61cdae94-1ee4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.22.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773438066, "uuid": "5712e344-1f25-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.93.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773415807, "uuid": "83b27b74-1ef1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.126.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773430445, "uuid": "9926d877-1f13-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.231.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773439325, "uuid": "45b22696-1f28-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.48", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773379625, "uuid": "460ef692-1e9d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.198.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773369905, "uuid": "a478450b-1e86-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.103.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773427384, "uuid": "78a63faf-1f0c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "210.97.100.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773411787, "uuid": "27ec5aee-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.126.225.120", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "DattoRMM", "colour": "#167832", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773412144, "uuid": "fcbf1cee-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.156.65.56", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "SSA", "colour": "#dcac3c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773415986, "uuid": "ee8e929a-1ef1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.60.181.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773401945, "uuid": "3da33a27-1ed1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.124.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408907, "uuid": "7306ed06-1ee1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.171.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773388326, "uuid": "87caafea-1eb1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.229.54.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773410884, "uuid": "0de7ae41-1ee6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.127.254.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773402185, "uuid": "cc88ae30-1ed1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.134.163.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773402366, "uuid": "3888c6a6-1ed2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.135.129.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773407106, "uuid": "41e1e1c6-1edd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.205.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773427145, "uuid": "ea0e4c79-1f0b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.246.15.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773424206, "uuid": "1263280d-1f05-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.95.214.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773365765, "uuid": "0078f374-1e7d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.12.98.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773388685, "uuid": "5dd8ae98-1eb2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.215.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773435485, "uuid": "54e2466f-1f1f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.50.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773365707, "uuid": "ddf217cd-1e7c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.216.44.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773412506, "uuid": "d4b44613-1ee9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.235.223.51", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773409207, "uuid": "264231e4-1ee2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.67.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773397865, "uuid": "bde9aadb-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.59.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773411906, "uuid": "6e942ba0-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.199.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773442984, "uuid": "cadcc70a-1f30-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.68.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773380463, "uuid": "3979505d-1e9f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.212.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773397684, "uuid": "51cd1a11-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.68.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773413165, "uuid": "5cf11e6f-1eeb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.230.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773370986, "uuid": "286d3773-1e89-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.76.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773374105, "uuid": "6b8cf508-1e90-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.52.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773420606, "uuid": "b070f2f2-1efc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.230.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404525, "uuid": "3f773428-1ed7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.72.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773442145, "uuid": "d674f30b-1f2e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.89.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773423306, "uuid": "f98dc912-1f02-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "48leal.gontake.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773418205, "uuid": "1935e92e-1ef7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.103.86.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773429966, "uuid": "7b511bef-1f12-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.98.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773408066, "uuid": "7df1a69a-1edf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.99.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773378244, "uuid": "0ec9dcfb-1e9a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.88.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773399365, "uuid": "3b7d2e3e-1ecb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.242.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773383586, "uuid": "7ea38b73-1ea6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.247.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773385385, "uuid": "af4348b9-1eaa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.251.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773415206, "uuid": "1dd070a2-1ef0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.40.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773390785, "uuid": "417f30c4-1eb7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.89.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773393065, "uuid": "90f54e02-1ebc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.189.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773384607, "uuid": "df0abd19-1ea8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.90.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773387306, "uuid": "27e63609-1eaf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.138.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773372066, "uuid": "ac411e23-1e8b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.141.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773428045, "uuid": "0286df97-1f0e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.178.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773390846, "uuid": "6612e20b-1eb7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.255.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773377345, "uuid": "f6a53f1d-1e97-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.210.77.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773442684, "uuid": "18251382-1f30-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.218.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773431165, "uuid": "45bfee57-1f15-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.211.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773394746, "uuid": "7a891de0-1ec0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.71.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773409145, "uuid": "00d7bbb6-1ee2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.111.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773382506, "uuid": "faf0ae7f-1ea3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.104.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773388506, "uuid": "f349a678-1eb1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.94.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773392765, "uuid": "ddd8f9b2-1ebb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.247.88.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773366485, "uuid": "adb59874-1e7e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "7xvura.coldcaught.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773372545, "uuid": "c9a620bb-1e8c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.122.114.19", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773377525, "uuid": "61fa0cf5-1e98-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.226.212.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404285, "uuid": "b0394ae1-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.214.20.14", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404285, "uuid": "b0394379-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.124.63.200", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773390485, "uuid": "8eedb94f-1eb6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "alpha-trace-0.cybergeist.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773444366, "uuid": "02412ce1-1f34-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "alpha-trace-x.kaltesystem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371406, "uuid": "23276c1e-1e8a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "api-node-v2.kristallwelt.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773435725, "uuid": "e3f93ed4-1f1f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "app-data-log.fortezzablu.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773376865, "uuid": "d8b4291e-1e96-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "app-data-sync.vittoriastrada.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773395945, "uuid": "456bd9c5-1ec3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "area-zone-55.grandespace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773379326, "uuid": "93b38739-1e9c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "backend-core-7.cielonumerique.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773437526, "uuid": "1534e640-1f24-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "backend-core-x.vitagrazia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773443285, "uuid": "7e1d5edf-1f31-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-infra-5.mondoluce.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773388807, "uuid": "a6927469-1eb2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-infra-9.mondosolido.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404288, "uuid": "b1d65b51-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bgsgroup.com.ar" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773379508, "uuid": "003fd343-1e9d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cache-dist-12.cielonumerique.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773438485, "uuid": "50f977ab-1f26-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cache-dist-5.vitagrazia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773403747, "uuid": "6fd0ce63-1ed5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "catalogmonitor.whitebus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371165, "uuid": "931d7d8a-1e89-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdn-static-1.kristallwelt.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773431944, "uuid": "169a9057-1f17-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cdn-static-2.sturmwelle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773367325, "uuid": "a26e70b4-1e80-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "closedgranite.chifdark.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773375665, "uuid": "0d712b73-1e94-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloud-storage-5.vittoriastrada.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773434106, "uuid": "1f288dfd-1f1c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloud-storage-b.fortezzablu.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773444785, "uuid": "fc62df2c-1f34-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "core-shell-11.kaltesystem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773390907, "uuid": "8a2a62bb-1eb7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "core-shell-77.cybergeist.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773364266, "uuid": "82e510f4-1e79-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cratelayout.coldcaught.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773403146, "uuid": "093165fa-1ed4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "criloya.whitebus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773393246, "uuid": "fc5c0539-1ebc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-room-v8.nachtlicht.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773389707, "uuid": "bf13a89f-1eb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-base-v3.mondosolido.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773443706, "uuid": "7947d29e-1f32-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-base-v4.mondoluce.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773427925, "uuid": "baa755b0-1f0d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "delivelagoo.gorun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773371948, "uuid": "66170561-1e8b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev-test-01.kristallwelt.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773433206, "uuid": "065532b3-1f1a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dev-test-node.sturmwelle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773412085, "uuid": "d97a4771-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "docinstall.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773370387, "uuid": "c3a746fe-1e87-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "endpointtest.chifdark.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773430446, "uuid": "99300fad-1f13-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "exposedemand.stayflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773383286, "uuid": "cbc0e823-1ea5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gateway-secure.starkstrom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773393006, "uuid": "6d8c5266-1ebc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ghost-node.cybergeist.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773437945, "uuid": "0f47c06f-1f25-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "github.guru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404288, "uuid": "b1dbe1c4-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gkgkgkgff.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773386406, "uuid": "0f781b94-1ead-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "global-net-1.mondosolido.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773442506, "uuid": "adc44db1-1f2f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "global-net-2.mondoluce.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773365765, "uuid": "0082f51c-1e7d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "i0n3-graph.coldcaught.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773402725, "uuid": "0ea8100a-1ed3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "iceevery.whitebus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773440345, "uuid": "a583889f-1f2a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "internal-dns-2.vitagrazia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773380225, "uuid": "ab3eee52-1e9e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "internal-dns.cielonumerique.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773367925, "uuid": "083e5166-1e82-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ipggvyss.chifdark.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773426725, "uuid": "ef678922-1f0a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "k97iydxz.gorun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773406746, "uuid": "6b3c4473-1edc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "l2mk50mf.rednet.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773393544, "uuid": "ae53cfd7-1ebd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "light-bridge-4.nachtlicht.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773381006, "uuid": "7d0978a0-1ea0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "load-balancer-3.starkstrom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773442084, "uuid": "b28ef9b7-1f2e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "local-hub-sec.espacerapide.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773386164, "uuid": "7f90b032-1eac-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "local-hub-test.petitbureau.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773363964, "uuid": "cf3d3622-1e78-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "m4nif-stack.coldcaught.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773429485, "uuid": "5ca244d5-1f11-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "marshlagoon.stayflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773372966, "uuid": "c4924f91-1e8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "metrics-sync.kristallwelt.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773397625, "uuid": "2e629c54-1ec7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "moon-orbit-3.ferroluna.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773384066, "uuid": "9d1b2616-1ea7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "office-link-0.petitbureau.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773440465, "uuid": "ed552af6-1f2a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "office-link-1.espacerapide.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773360127, "uuid": "e00dd10c-1e6f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ohqr.migratetulle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773396786, "uuid": "3a89e223-1ec5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-space-v.grandespace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773427145, "uuid": "ea15892a-1f0b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "opticparcel.gorun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773429906, "uuid": "57cb3dd1-1f12-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "organizecourier.stayflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773428525, "uuid": "207e3d96-1f0f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "otyhyn.gorun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773395407, "uuid": "0497fe4f-1ec2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "outer-rim-9.grandespace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404288, "uuid": "b21d20de-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pamellioty.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404288, "uuid": "b20af27e-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pardu.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404285, "uuid": "b086d0df-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pizzatang.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773444066, "uuid": "4fbd38f6-1f33-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "point-entry-1.mondoluce.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773390126, "uuid": "b90d19e4-1eb5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "point-entry.mondosolido.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773380463, "uuid": "39846cc6-1e9f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "power-grid-88.starkstrom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773369306, "uuid": "3f5619b5-1e85-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "reel-age.chifdark.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773436627, "uuid": "fd6e6b9a-1f21-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "remote-access-v1.vitagrazia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773377588, "uuid": "87ca0981-1e98-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "remote-access-v4.cielonumerique.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773411726, "uuid": "03b0dce9-1ee8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rich-wave.gontake.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773398886, "uuid": "1e6b9cca-1eca-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rock-core-v7.ferroluna.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773363305, "uuid": "46777244-1e77-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sannod.liberalpilka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773399186, "uuid": "d0f55625-1eca-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sat-uplink.ferroluna.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773393906, "uuid": "85b7b1b2-1ebe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "scan-point-21.nachtlicht.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773361025, "uuid": "f73e3cc7-1e71-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "scarnetwor.liberalpilka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773434947, "uuid": "14552499-1f1e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv-cluster-7.fortezzablu.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773385806, "uuid": "a9c16fce-1eab-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "staff-portal-5.petitbureau.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773398526, "uuid": "47c54ec2-1ec9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "steel-base-9.ferroluna.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773381965, "uuid": "b8acf590-1ea2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sys-monitor-x.starkstrom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773426187, "uuid": "aea2c2f0-1f09-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tri-nexos.gontake.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773445745, "uuid": "386f787e-1f37-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "user-auth-v8.kaltesystem.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773392287, "uuid": "c132984e-1eba-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "user-auth-x2.cybergeist.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773409865, "uuid": "ae68726c-1ee3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "uzpjxi.whitebus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773396545, "uuid": "aafd703a-1ec4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vast-field-01.grandespace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773361985, "uuid": "33ccd0f4-1e74-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vfjpe.liberalpilka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773394207, "uuid": "3978e932-1ebf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vision-sync.nachtlicht.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773425044, "uuid": "05dfabb1-1f07-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "visuavital.gontake.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773361446, "uuid": "f23cff62-1e72-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorcoreix1.liberalpilka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773404288, "uuid": "b1d4ac3c-1ed6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vsdvsdvasvf.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773435365, "uuid": "0d6a8da0-1f1f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "web-proxy-88.fortezzablu.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773376387, "uuid": "bb9a5f39-1e95-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "web-proxy-99.vittoriastrada.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773390544, "uuid": "b2520ea3-1eb6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wmfkj2w9.oakbit.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773384666, "uuid": "0268de22-1ea9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "work-flow-v2.petitbureau.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773441006, "uuid": "2f7f0950-1f2c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "work-flow-v3.espacerapide.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773431706, "uuid": "8875ef19-1f16-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zendraix.stayflat.in.net" } ] } }