{ "Event": { "published": true, "date": "2026-04-04", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-04", "timestamp": 1775348123, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "2e0b381f-9dc2-4e7f-9414-9917e661b077", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1775261056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775261056, "uuid": "6fa8402d-e352-4750-bc5c-5089bea4b7a6", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775261056, "uuid": "8ed07e13-d6f9-44c0-9e0c-6561fe5bc4d7", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775261056, "uuid": "b6e99b21-d592-49d6-86d7-22edce795956", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775261056, "uuid": "8f40a565-e177-4ffe-884b-cea00bb1005c", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775261056, "uuid": "feac6aad-c4e0-4b46-92c0-987287555423", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1775263625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775263625, "uuid": "13e76a4c-2d7a-43c0-b272-ee6b9d7e19e8", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775263625, "uuid": "f99b74ff-a860-4f5b-bbad-84cc4eae7667", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775263625, "uuid": "22f6fd5d-c757-44a1-a0f1-e9e2e1ba3bd3", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775263625, "uuid": "f7771454-7115-4d7a-8b4f-286dce9c30d4", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775263625, "uuid": "c80c74ed-e5b5-41e1-8948-ed3099b63bd2", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775268010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775268010, "uuid": "7f43e5f6-2d08-442c-bc27-a6d7fc6ca5fe", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775268010, "uuid": "102c991a-8b70-4387-be25-6100ffbcf494", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775268010, "uuid": "2ba171aa-2ca7-4b17-bd3c-56a2c577df1e", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775268010, "uuid": "895832c4-6ec5-432a-9fb4-c4ad6913397f", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775268010, "uuid": "8f627901-4271-4cd2-b77a-37da6c73c08c", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f0b5133-2fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1775268970, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775268970, "uuid": "34ad1973-818e-4b97-ba6c-09503c5b6215", "comment": "Malware payload (CoinMiner)", "value": "43472f7b283aca33bb92f79f9bb19cc4", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775268970, "uuid": "c4e05fd9-2c10-4e6a-9ca1-cea68e993c85", "comment": "Malware payload (CoinMiner)", "value": "4f361ec950cc375e21caab543e37b463e0a5dc3d7f8d8d188f3498932cd46d5c", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775268970, "uuid": "b044f020-397c-4978-9d9e-eefa059a03b5", "value": "T1283123F4B4A2B9F5378B9930A6BF4425B833104AAE1278596523D02974FDE87E33DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775268970, "uuid": "a79dfed7-b677-47f1-af83-9d4679fa6852", "value": "48:Xet1tsbidimskeP1CrGuZ27RVInSkQkxV5D:uLtsCFe/umA/Pf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775268970, "uuid": "be52a574-60a3-40bd-9b65-e29d6c6bab1e", "value": 1714, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775268970, "uuid": "3c7b9ee8-020a-4659-92b7-5c18443d5861", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa03aa74-2fd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775271431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775271431, "uuid": "32fdc453-cb52-40d1-b9e3-a3137280722d", "comment": "Malware payload (Mirai)", "value": "ddaf5d110ebfcc230d2a215cecdde0cf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775271431, "uuid": "de325115-558d-4506-ab4b-1f773f3333f2", "comment": "Malware payload (Mirai)", "value": "69580e576e8b29dccb7ed5b32926a153ec7bd84939d6d1bcf57c21d3b4ec6dea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775271431, "uuid": "7bed72a4-6f72-4cb3-9c9b-5f28c71d5dc9", "value": "T16693D606FB650FFBDC6FCD3706A9070625CC550A22B97B3A3574C928B55B60B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775271431, "uuid": "212dd767-3c8a-4f07-89ce-39377e095f16", "value": "1536:GHz/LXDiF1dFw+0FmAqWvhfxFAqjItWd5RyBmZiY6m2B9HglmuCSAaf:X3Q+0FJVMW8BmijiCS3f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775271431, "uuid": "c71a556e-2d81-449e-ad0d-f892c28fcd9d", "value": 93316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775271431, "uuid": "bde0fe73-63c7-4435-a870-0da890c3c155", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a536711-2fd6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775273257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273257, "uuid": "13509992-c986-4077-a33d-f578425fd8a1", "comment": "Malware payload", "value": "19ec9ef2d17bf7a341d2f0ccb99745a9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273257, "uuid": "e28dd3ed-73b7-455c-a54b-16cf217f49f7", "comment": "Malware payload", "value": "9c8bbc6f57e8b8b18d6740cab1210ac5c151a02aa037d0d0c8986eb361526147", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273257, "uuid": "c920823e-5fc6-4782-9cbe-04d5dfeb2622", "value": "T18493E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA623895F9D903AB32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273257, "uuid": "960c1060-9103-417e-b7fd-231deae95fd2", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXSIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775273257, "uuid": "6d1bccb1-b103-4cbb-bcc9-dbd5e362d3c7", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273257, "uuid": "47cfa4fd-256a-494c-b600-a7d58829ff69", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cc202a4-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775273637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273637, "uuid": "4962f733-6eff-40ce-a625-2c0a91fce132", "comment": "Malware payload (Mirai)", "value": "182be1bdcb5d0ae9bccaae7b1bc31614", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273637, "uuid": "e603e3ad-7f07-4c53-9ba3-c541c3926b47", "comment": "Malware payload (Mirai)", "value": "ffacb84755f5cb3f6cab375acfa999130585935dd3cef52294620630b830d491", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273637, "uuid": "1cbec03d-24a3-44ee-b9e8-b9e40ecb6c39", "value": "T1EC93F60ABF610EFBDC6BDD370AAD070125CC581612A96F3AB974C92CB54F64F1AD38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273637, "uuid": "efc84331-74d3-40b5-8d50-c47170dd4cec", "value": "1536:JFmDMIQWaBkZjVqE8yNwi9AQUyeHYZ+qvDdh9j:JFmDMIQ2pwiAQEYXzj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775273637, "uuid": "afa8d576-6597-411b-bdc6-2e32df42c721", "value": 97628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273637, "uuid": "45a60369-98a5-4143-8146-c288ebf30e21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74064653-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775273783, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273783, "uuid": "295db7a4-e18d-4acd-91a2-3bcefd27b3db", "comment": "Malware payload (Mirai)", "value": "3f5fd531cb2a8a9a9ab873f21dd37373", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273783, "uuid": "71b8148d-8a84-4970-8be3-19db791c42cc", "comment": "Malware payload (Mirai)", "value": "2c24953ebd08ebc8219cef505814492033138790f4a51815fd7f59a62830853b", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273783, "uuid": "de9aa1b4-6903-436e-bbd0-06a8d5d5ca2c", "value": "T166F2F882B883462BC2E423BBEA6E529D336573ACD2CF3327D8115B107B9951F4D63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273783, "uuid": "e6c4b338-1d60-410b-b3a0-9ea621c22ff2", "value": "768:ZaiDoXWp95qgA6iQFJ/aJBD8JU1u21yIuSFMNP:BaW/5NAjBDsAySs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775273783, "uuid": "c995e5b7-01a7-4124-bd8e-4ffc23ff190a", "value": 36516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273783, "uuid": "0b348c9b-b84a-47a0-a5fc-5d24c97a8d60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "def537fb-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775273963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "d8d4f0c4-3ab1-4676-8da4-fddadc8d8008", "comment": "Malware payload (Mirai)", "value": "60be09cc8f433220a8f5acd9046ba2eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "4cfa4a5a-ca88-4190-9b2e-e04c42cee0ce", "comment": "Malware payload (Mirai)", "value": "33b1f2396d6714ea216c990b65b044d190e0828ffa61681202a97cc1359d3975", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273963, "uuid": "59b92171-1871-4436-9ee9-5105ce5728a4", "value": "T1177318D7F800DD7DF80ED77F44530A0AB231ABA146830B366357FA67AD361A50826F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273963, "uuid": "db877c27-f8a1-4ac9-b260-770fa060df5c", "value": "1536:6MjDl/wwmjXnAEOk9Ta8h5yXtZI2Ggikp4XMLMiS+znhhe5cNHpuQQg+:6MjxnuZOkxnyXtZI05uXKMiBKcNHplQH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775273963, "uuid": "338bf617-dfdb-4800-81a3-7de9fc854c5c", "value": 79488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273963, "uuid": "9b95c13a-8149-4c00-9864-7d5102b6ece8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "defa10c2-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775273963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "59486a31-2774-46f5-a2a6-7283c9ffb1b6", "comment": "Malware payload (Mirai)", "value": "4bc52f55f2a87ede13a424bf1dfdd4ca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "60bcfe50-2d63-4d55-b964-9f25b735616e", "comment": "Malware payload (Mirai)", "value": "86f6f1ac0c96f6ecd0b93ade872c0a68ce0dc82d09496a042cfb388d266e388b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273963, "uuid": "839a7361-3778-4de0-9bf9-2361725a0e2e", "value": "T1A3539D77C9296E54C15986B4B430CE792B63F88482872FFA1B99C2798047DACF6493", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273963, "uuid": "df2745e8-95f1-4f75-bbf9-52a15607e750", "value": "1536:daXwtcKtFAMHdazjKHqcfsTD/GCwi+hCPoK:d8UtOMH8zGH8TD/GWwcf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775273963, "uuid": "4e885f2b-fea7-4d0a-8f6c-796e3e59bf8b", "value": 62948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273963, "uuid": "0f18ca9e-49cf-4e88-a9a1-59d00a16a491", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "defb8451-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775273963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "9fc43bce-27e4-4b9c-b23b-38498ac7ea5a", "comment": "Malware payload (Mirai)", "value": "a2422a37aca2f96f5376af006693847c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "79cddd8a-21f4-474d-b8e9-a410018e7a86", "comment": "Malware payload (Mirai)", "value": "c6c5e873cc274b60aedc65d551feb67406592f85101aa7c133fa73a91368d7d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273963, "uuid": "0a6b0239-92ca-4775-9a13-07915d76ba85", "value": "T14693B81F6E218FBDF759863147B78A22A39833C627E1D685E25CD6005F6034E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273963, "uuid": "48b61cc2-8489-4156-bafc-b7536e3762e4", "value": "1536:RB8aZkDrEr1NvfPxfLCz/TTen2ZbvTHA+k:XZkDwr1NPxfLCz/TBHrk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775273963, "uuid": "433e7dfa-f5cd-4f7e-90fb-6b5173edcc22", "value": 93316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273963, "uuid": "d888f82b-22b9-4fcf-8f5f-7f14012b0486", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df033329-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775273963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "1a16496a-bf8c-496d-a368-9db403d64796", "comment": "Malware payload (Mirai)", "value": "2f1798d3b2b42b8d503b1d910ab04042", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "a4304c01-2e78-4f27-883d-107dcd627660", "comment": "Malware payload (Mirai)", "value": "df74f5f9a1b046f4b9d180f07ad734df52df9cac41bb38aa8549a48c1d920faf", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273963, "uuid": "fc6647ea-156a-43c9-a6da-f99737162111", "value": "T1B7E32A46E6418A13C0D6177AFAEF42553323AB64D3DB73058928BFB43F8679E0E276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273963, "uuid": "012fb4d6-69e6-4e51-897e-594e8a8ace41", "value": "3072:ss8xsB+58axO8h9Lbgn2/+Tkpl2MsQLKxi0M/9Af:ss8xz8axO8h9LbW2ckL2DQLSRM/9Af", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775273963, "uuid": "baa7c7be-304d-447f-9829-30b4313d00a3", "value": 153715, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273963, "uuid": "d6dd72bd-b2f5-441e-b3d0-e5aaef7f1512", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df03cc16-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775273963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "9cb91e7c-6dbf-4e91-bd0d-3389e3a86f68", "comment": "Malware payload (Mirai)", "value": "3999c43b1cc6d28868a0e90f427650ac", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "e078ee8a-9648-4d2f-9a51-feeb2ce71e52", "comment": "Malware payload (Mirai)", "value": "9b91fe3431a6db3387fea765b0bc905cfe8f8b17ad643c33f068cf62e9d48363", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273963, "uuid": "c9e0c72b-2526-4190-a18d-c397d187ca11", "value": "T179731995B8818B22D5D502BEFE1E118D3313177CE3DE73129D206F24778A96B0E7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273963, "uuid": "cd4ee11d-3f8c-4784-9956-967d7e059320", "value": "1536:nAnOHGsTtml2P9gIgDZPa3SZ0QmMNiB8sYqSBp7ib59Ye/:5GatVqZDZPaH8sYqSBpGb7b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775273963, "uuid": "36ad2f34-f2a9-4eaf-87d9-2f2df9dfc709", "value": 79324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273963, "uuid": "02cabfac-2c9e-4003-8f76-9534292ac96e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa3acfd3-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775274008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775274008, "uuid": "08b4b739-5fbd-43ae-8d70-cda9996c3df0", "comment": "Malware payload (Mirai)", "value": "b8a0eacf75cf958e5feaea0878e9f773", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775274008, "uuid": "08506590-8d6b-4cc2-875c-ac916bbd575c", "comment": "Malware payload (Mirai)", "value": "0e574d158de0e356e9bc18dd75bf0c82d216e24ff634ebe95e29af681173e969", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775274008, "uuid": "6a2f488e-9434-4ff3-a4bc-a813baf29b93", "value": "T117633B42B31C0A57D1675DB4263F27E193AFA99120F4FB88351F9B869272E331186F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775274008, "uuid": "2bcd5e89-2d76-4f35-a285-9eac54644237", "value": "1536:33/7G/wvl2PThqsjR+UR+bXCI/5q1rFpOq5BMbee:/7tsMYYCI/A1qqpe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775274008, "uuid": "734579b5-e4d2-4c6c-833b-571cb67a6913", "value": 69564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775274008, "uuid": "cd94e970-2bb8-4c26-b6be-3cd63f79305d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa5cfa83-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775274009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775274009, "uuid": "ab9f8bbf-917d-4748-aaa5-c1e8908fbea7", "comment": "Malware payload (Mirai)", "value": "f754830373a9a502d11d5873f1749c0e", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775274009, "uuid": "ecf78e8e-d898-4ef1-8d68-03382ababb8e", "comment": "Malware payload (Mirai)", "value": "51cff1a4556d40a537da8e8170057213d15ee01ee113113cb96f7f6e47a18291", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775274009, "uuid": "b4496c05-9282-44b4-99f7-8e3bc72ca2ff", "value": "T185633A81BD815713C6D122BBFB5E428E372613A8E2EE3207DD226F21378781B0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775274009, "uuid": "379dab52-9681-4711-8ef7-2eba63a5b33a", "value": "1536:h8M0OQTv0KtVkrkkNe2uN1jOa3j1OpKaEkvRK:h8MojYze2ADgL4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775274009, "uuid": "bf2cf5bc-cf93-4c02-8f83-a95dc04bb24b", "value": 72544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775274009, "uuid": "490b2044-0ff8-4f06-a67f-eed029b3b436", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "687c7a77-2fd9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775274623, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775274623, "uuid": "95883894-4698-47fc-b55a-1450ff4ec381", "comment": "Malware payload", "value": "1c4ee71aa19161bf80b9d9f2e429fc4f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775274623, "uuid": "1938a7d3-1d69-408d-a836-f382762e25a3", "comment": "Malware payload", "value": "3285dd5b1aeb7d3c9539512a4c00f0dba88a268614083c2779d3da61d71d9c07", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775274623, "uuid": "946dd01a-1fa9-43bb-88ec-7c0d3511dc43", "value": "T10D8309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775274623, "uuid": "741b693c-5aa5-4961-a0cb-6f38d75b39ec", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnqWa+VN/:XEKltp9txAX/yr2pbqWbVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775274623, "uuid": "a1febb5e-711e-4831-a04b-807971b5edcb", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775274623, "uuid": "2c1731e1-ac13-4679-ba8e-2d9d31e1f01f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775275404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775275404, "uuid": "4f970d9c-7f1b-4d40-adef-040825914bbc", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775275404, "uuid": "00cddf82-9a5c-48e3-a135-ac169af70b0e", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775275404, "uuid": "44b249dd-7da2-4a19-b042-97023c5715db", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775275404, "uuid": "31111f4a-8775-4c6d-9b8d-29eb5bf810d2", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775275404, "uuid": "8eae3ff9-6876-4465-b4f3-2011f279cfbd", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6aa0a967-2fdb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775275485, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775275485, "uuid": "d8f77467-c217-4384-a2a8-75a62acc0c71", "comment": "Malware payload (Mirai)", "value": "fe3f34bbafa46d8cb34dbb7728a36f5e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775275485, "uuid": "a5810f41-0a8d-44bf-bbcf-0bd5b6e5be48", "comment": "Malware payload (Mirai)", "value": "4a580db59a598814149e4f6fc8b14bcb7374bde672abcaea75b946201e83df71", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775275485, "uuid": "bdaf8b8f-bafb-4119-a6dd-352f4f48f6a5", "value": "T158313247A95EAA3300530729DB93F6D4A143281349A0DFCCF48FE2307F1B4B4B6A07", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775275485, "uuid": "360c45ab-d664-4bc5-bac7-95b27aae1a81", "value": "48:YjFu17Kab1KXq/171g14h1RK1ep1F+1AD17A10sI1j/17s/1wbD1XF17jMu7iBFG:au17Zb1B/17i121M1s1U1I1U1HI1b1gQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775275485, "uuid": "f0d3bbca-fe62-4eca-87bb-9d18f054ba76", "value": 1608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775275485, "uuid": "438ac99f-bb09-42e9-ab18-39d30030c9ad", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae804f8d-2fdd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775276458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775276458, "uuid": "cf8b171c-21d5-409e-a1cf-2cdba2a01aeb", "comment": "Malware payload (Mirai)", "value": "c48ea33322e3d9776f0d09eff27b65a1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775276458, "uuid": "3b1f1544-1255-43af-9a99-eb1552ff20df", "comment": "Malware payload (Mirai)", "value": "aabe3c75c74611484aae5f13ec6212a348df01d223d4c2d2a7d77a306486c1d8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775276458, "uuid": "ffa10a00-99d0-44d5-99d5-8934e42cf663", "value": "T1A5E3E70AAF610FFBDCABDD7702E90B0224CCB91715A53B797534E818B54B18B4AD3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775276458, "uuid": "f8a8ed43-3073-4f2b-b909-2a2abbf443c6", "value": "1536:smZv/wOvVlyhm8NH0Jwtgm/rEn0vqrTTTDK1RnjwDOgIlgrsZW7unKZ/gg6qM0vR:nPQmatB/W0gOKrsYwWs3S3GiN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775276458, "uuid": "8c95710d-4a87-4d0f-a4d4-1dfa12f0320a", "value": 153124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775276458, "uuid": "c3dec44d-11c1-48d0-b7cf-c3b4d2696b6d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d959c78c-2fdd-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775276530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775276530, "uuid": "0fdf4bd0-8db1-4298-a938-2608d6b1ceb6", "comment": "Malware payload (Mirai)", "value": "c51bf60076667cb81f2df0d5cb333f2d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775276530, "uuid": "042e5530-7ad4-4a16-a820-d1ce00a20310", "comment": "Malware payload (Mirai)", "value": "8120766b6b118ee6863f57d2a2f7f53752d282fd4d12d925f70b9ab74f003534", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775276530, "uuid": "585f24e1-aad4-4c24-b470-88186dd57e81", "value": "T18BC32902771D0F43D1232CF02B7B1BE18B9AFEA119F4E6C4611DBEC952749B62186E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775276530, "uuid": "7b9c0f94-1c6a-44e9-a3d5-602672d79af9", "value": "1536:0cyeafdV/i4MbEXdKTC7ZbF8E1ixjb6ohww0b+wg+2b5BTvPRBsanGPIJ+dJak7M:0cpqdVzcybN6Cw0/gLzTsacIOF5vW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775276530, "uuid": "5cfa1ef8-d9b0-423e-adac-d53c10ceb030", "value": 120812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775276530, "uuid": "7161e7a8-8c90-415b-830f-8a291c01ee2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a35f5268-2fde-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775276869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775276869, "uuid": "af9a031c-ba29-4643-b356-05da9c1b82e2", "comment": "Malware payload (Mirai)", "value": "2246a5b13d268e0be3e0bd6e985ef710", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775276869, "uuid": "675c31c4-f6fe-4af4-9d02-4c6a21004f7c", "comment": "Malware payload (Mirai)", "value": "d468b6ada8e3dcbfa91c708de4fe1ca3e41bbe18b2f5af2054a2e0a5686fdc9d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775276869, "uuid": "2139cd58-0c21-462a-9947-c941ac3c7d6c", "value": "T1FBE3970A7E228F7EF269877447F38E31975877D616E1C680E1ACE5401F602CE645FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775276869, "uuid": "673b750a-8b08-4a3e-b0eb-d819f52e8c46", "value": "3072:cwLa8TPXxIJSkWGiJqHcy40abEnJvlTcH2al:cwLNLxIJSTGwqHgz+JaWal", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775276869, "uuid": "40bb52b0-c075-4a56-b6cc-4871bd323e0d", "value": 153124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775276869, "uuid": "4d054404-54b9-4d8c-9ed1-5e6e2ec3e59a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b9f55d7-2fdf-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775277286, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775277286, "uuid": "4a4feb6c-71d0-47b7-80b7-026596bf7159", "comment": "Malware payload (Mirai)", "value": "0663b675e6942409377877b3fce56255", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775277286, "uuid": "0b385d8c-2ecc-41ce-a8b0-d0a03464b1eb", "comment": "Malware payload (Mirai)", "value": "8ada174e7f0845bee202dbb6613ac07665ae5fe9db08d297e8b8da06d096275d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775277286, "uuid": "694bc12d-7d5a-4108-8685-6d9b2dfc1d9a", "value": "T1DCB309427E429F13C5C312F6FBAE42993B136B78D7EA3142ED247F91274B4DA0E266", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775277286, "uuid": "65a87db5-69f2-4bef-8dc5-5d635c114974", "value": "3072:86SGX67aeyWUeAs0o/cMB++cBYzppHwAUf:4D7aOUNs0rMB++cetwAUf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775277286, "uuid": "a2af64e3-2832-4998-a54b-b5afd36b3ed5", "value": 116620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775277286, "uuid": "bb357ac2-b4cd-4d7d-97c0-03ebae4d7546", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29c527d2-2fe0-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775277524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775277524, "uuid": "0f11a3e7-157d-4288-bbb8-749cd1834b53", "comment": "Malware payload (Mirai)", "value": "cae3766e329cbda2d77d975e707e8655", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775277524, "uuid": "97ec7b05-2ca0-409d-8056-faa5f4bf168b", "comment": "Malware payload (Mirai)", "value": "123d0b0b0e246646a29a3eeeca3cec00e015ac8d69a9d586bef992c2a1051009", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775277524, "uuid": "9bcd8a48-3bd3-4c6d-8c76-a4fe1312fdd5", "value": "T1ABE46D9DFE4E3C42E2D7E2789E4987E1B21771E0D32391A33982434DD5C6AD9CBB19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775277524, "uuid": "0216b1de-7f31-435a-a036-5404a3ecfa77", "value": "12288:0YUmBOgLvQ3a5M6bJSobEhHL1YO8/8tM8p+XdpBABgiCGw5dOMMCwC:0TmBPQ3apSGEhHL1y/kPd1jx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775277524, "uuid": "af33dd79-bcd1-4960-b63a-0a651a5610cd", "value": 700800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775277524, "uuid": "fde75e9d-3502-4d3b-b847-15366570deac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf6d06f3-2fe1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775278231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775278231, "uuid": "a4e3d2a0-0922-44b6-89bc-0c9bca52e980", "comment": "Malware payload (Mirai)", "value": "e6c65f737190a40c27308601db53dc7a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775278231, "uuid": "5ee86c6e-1bed-489e-9398-c63450111da2", "comment": "Malware payload (Mirai)", "value": "15588e148ce17c6225ffdccad499ddb5adcf931f189355f600e54d861f6992ae", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775278231, "uuid": "a0deac9b-4106-4f84-baad-fbbd3d10ed51", "value": "T1F3144A47EEC90EDFC45BCDF086BF836B19A3659B48D2E2F5543C8C0C355D28A56A36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775278231, "uuid": "d8d8d447-fb0d-4026-9718-a4662ce066cc", "value": "3072:+L26vVqEAy2jOOJaisBjmAe9kkdoqipAucf8bZzMjwfQx0FKafesv0wxVAq:EtqE+OxisBvkcpGf8bZAeG0htv0wx6q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775278231, "uuid": "22a07f19-7103-48c7-afaa-95629876f1f1", "value": 204724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775278231, "uuid": "54b337e2-5d49-4caf-99a3-28e046f59bd0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13e8660f-2fe2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775278346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775278346, "uuid": "571873d6-c879-4065-95c7-3b9a2da986aa", "comment": "Malware payload (Mirai)", "value": "7dcba15efb67d58e98bbc92d9d04c327", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775278346, "uuid": "ddcc5bd8-240a-4876-909f-f9bfc1400dd4", "comment": "Malware payload (Mirai)", "value": "8cda6ff36f64a6c787982c216740857cf6b06b3c0dce3f341b3fcaafd6a8df3e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775278346, "uuid": "1cde8a06-1bf3-431f-b3f1-f289efd55a6f", "value": "T13ED30816B9919F11D5C321FAFB9E814933136FB8E3F93102DD206F54278A99B0F7A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775278346, "uuid": "4feac0b3-d5ac-4db7-8e2e-cab6f7121771", "value": "3072:JTnpOH3Zs2b5RMzafKaanyqaEPhmy5lsp+kXb1wBC+3:lQH3l7MWKaanyqaEPEy5S+AbWBC+3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775278346, "uuid": "ce0645a6-c0e9-4e30-b52b-a7b8f645cd99", "value": 141424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775278346, "uuid": "4dd0f70c-b46c-4a03-987e-842dcf42b8e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c7a8212-2fe2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1775278361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775278361, "uuid": "e5a1e676-d32a-49d8-a7f4-ff7f259550b7", "comment": "Malware payload (Adware.Generic)", "value": "74103dccb6cb41b1772ce21532e8589a", "object_relation": "md5", "Tag": [ { "name": "Adware.Generic", "colour": "#A3F5F3", "exportable": true, "hide_tag": false }, { "name": "Adware.InstallCore", "colour": "#51c189", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775278361, "uuid": "33be7b98-8aeb-4461-a456-7d00e3a4c346", "comment": "Malware payload (Adware.Generic)", "value": "d345762e012e8b44d73d187a55c7fe6068a4066e3f9b2af5d5199809206d2385", "object_relation": "sha256", "Tag": [ { "name": "Adware.Generic", "colour": "#A3F5F3", "exportable": true, "hide_tag": false }, { "name": "Adware.InstallCore", "colour": "#51c189", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775278361, "uuid": "259ca606-3c8a-4e96-82d8-a866401457bf", "value": "T1C9A6233BB268753EC5AE0B3255B38620997BBF61A91BCC1E47F4180DCF665700E3BA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775278361, "uuid": "89e1a93f-18df-4a41-8a95-4388ad5dc9d5", "value": "e569e6f445d32ba23766ad67d1e3787f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775278361, "uuid": "4fa71362-8e79-4f76-8df5-63a66e0bf207", "value": "196608:mGbldcszNnkzEYVLxJE+YqOAoIguoWUXySF6sna0KI:nbIsxni5VmhqirJHXIuZB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775278361, "uuid": "8c171e8a-c8be-4b19-9759-93d0baff2ab5", "value": 9507827, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775278361, "uuid": "223673a2-fd36-439b-9ff9-3c62ca771924", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f75deb62-2fe2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775278728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775278728, "uuid": "3dd85c4f-f37d-4774-89fa-bc49811c0742", "comment": "Malware payload", "value": "875b5519082a9a5fb4149527287faf76", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775278728, "uuid": "6858b0aa-8665-4a29-8241-d18c18be96f8", "comment": "Malware payload", "value": "46d099d8a22b9737610cce86edd20b829901c6c454edf46268dfcd035ede4806", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775278728, "uuid": "5d39ac5f-8aa3-4824-bbf0-c4fc1177977a", "value": "T1B9931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775278728, "uuid": "44140a1e-693a-4cd6-8356-2fcfb48c644e", "value": "1536:0Byp1tF/uwMmAIa14oXx+I7epeV7tb73WdxCrCitkb5fv2v05xsprCK51sPyKMt8:08jI00GitkbFv2v05xsprX1sPyTt3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775278728, "uuid": "b32b2bc4-ad4c-4b93-ac6f-e2b4f84f71f0", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775278728, "uuid": "f9f74a9b-5b17-4e81-afbd-5097a9e53819", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7464c2fe-be87-11eb-bbf1-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1775280011, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775280011, "uuid": "237b7425-5b72-4feb-9a90-0d21b392fb2a", "comment": "Malware payload", "value": "242b2099ce6162b72013e76c6a459ea0", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775280011, "uuid": "c49126a6-9f3a-43df-bcf3-65f6707e9e8e", "comment": "Malware payload", "value": "61566b7a6e0f4ce9ba064b0de1dd3cd99edc5819125c28314b33fe19af79be35", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775280011, "uuid": "9955a76b-7dd4-435e-b3a8-303953d67889", "value": "0C64E1CAED01AE75F9C506B9FA1F074973B38BE8D3C7B110E624C6143ADE6468B39584", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775280011, "uuid": "0d496002-495a-4669-8077-e9000b7c7309", "value": "6144:7O/QJHZweEL/NOjCHm7FZZncI77oNsKqqfPqOJ:78QpZsKCaiI/HKqoPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775280011, "uuid": "9f5465c5-b409-4966-9c98-03751c696d90", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775280011, "uuid": "2113b998-2e39-48e1-8ac3-fb7b1f2c8abb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed91a831-2fed-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775283436, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775283436, "uuid": "578c0f52-d683-4430-a43e-aeeb1313210b", "comment": "Malware payload (Mirai)", "value": "2ff9d31110cea044f2ccdccc38b92b68", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775283436, "uuid": "2d7b983c-42f7-4c29-a401-57518d6aaf64", "comment": "Malware payload (Mirai)", "value": "23c0fff88fda9fb91c9dcc47a37d51696423ee775742e598c62a5585e6f4cff6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775283436, "uuid": "a964ea38-2f0e-4eb2-9c14-c271b9f78a7e", "value": "T1B6E09ADDB0B928A8FC00BE4378D18F946141F29B6E9B4F49584C1E61ED86AB4303AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775283436, "uuid": "6d4aab1c-a14f-4d0f-be7b-2126d5d14cd5", "value": "6:PXr9UCuyU4IUZXr9Uh0yU1BFIUAK+Xr9U4LyU4IIU4hPXr9UeGLyUeGIIUeGhkn:JDIyHFIjVnIdedIIeu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775283436, "uuid": "06d050da-2fbb-47d9-a8fc-6e4d9ee0d5d1", "value": 351, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775283436, "uuid": "3fc71e33-3af0-45eb-add9-02adf59f0795", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f627b95-2fee-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775283681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775283681, "uuid": "be1e7d19-6b88-4e11-bd10-bc95689aa827", "comment": "Malware payload (Mirai)", "value": "9390aa714d9340ae83195d9dcc557494", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775283681, "uuid": "ee528da6-e9ab-4aa9-a4aa-246027464322", "comment": "Malware payload (Mirai)", "value": "9913afbed6d45a489c7962cf5acb83a286889fb082880b8acfea9ca3e4c5accd", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775283681, "uuid": "4fafb8dc-ae83-4588-982b-003dea1d94e1", "value": "T19AA2D11572A32D66E3D91C3DC9AA8357F9A70BFC80F632757D456620C94920A3E38A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775283681, "uuid": "2b27355c-3792-4dc7-afbf-773b06973182", "value": "384:TvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjrLwhymdGUop5h+:TvQn4j+ZO5fKAlx/Lws3Uozc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775283681, "uuid": "85caac6d-4b02-4fe7-b4bf-0547ca1477cf", "value": 22168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775283681, "uuid": "4a00b4ce-9936-4557-94ec-2feadf363763", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b40db8c2-2ff2-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775285487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775285487, "uuid": "06bf4a7a-bf37-4774-a5a0-9bde936d14b1", "comment": "Malware payload (Mirai)", "value": "f896eb423d1f20d0b36143bdc9633c41", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775285487, "uuid": "cb111e9d-880a-44d7-8938-eff0bc0bdf2e", "comment": "Malware payload (Mirai)", "value": "73d62b475534c08e67fd1b4c8f05ab3fd64114260cb7b9924c091b48a0bcfa2e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775285487, "uuid": "b4b5a484-7111-4374-bda4-37d8fe80bd06", "value": "T15B157C9DE786E4E1F12300F1025FD7F71534A12A9013FAF6EF8A266274327A16F562", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775285487, "uuid": "78787a86-2cbf-4300-8832-27a64f229dd9", "value": "12288:rOEM0ANU6+/Qhd3hNmkjMkEOUPu/+EN46iBD+MM06WORKSPyt/rgR9e18Lu:yE1AN7+Yhd3hokFUM+ENfMqMM/8t8X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775285487, "uuid": "93dbedfe-4c10-45df-a73d-1c61ff824777", "value": 926968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775285487, "uuid": "da470b37-9cab-41b0-9e8f-40a9470c2be5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f8f0166-2ff5-11f1-bc00-82aee05be84a", "comment": "Malware payload (RodexRMM)", "timestamp": 1775286741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775286741, "uuid": "31a7de42-b01e-4db6-81df-33e6ac210f26", "comment": "Malware payload (RodexRMM)", "value": "1e6acadabf333d7caf8b66e234af3a31", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775286741, "uuid": "f6e4eb34-04a9-435f-9dba-2e4e016c85d7", "comment": "Malware payload (RodexRMM)", "value": "34a774a9f08253a41a215b9ec6022e9f3911f2ba15d5c453cf7ef329120c8c65", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286741, "uuid": "522d28b0-9db4-4811-8a32-af1db2e0cc0d", "value": "T1C1764903EC9815E8C1BD913589779623BB617C494B3223D72B90F6283F76BE0ADB97", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286741, "uuid": "07249696-1cef-4df2-9145-4b07ed7faf95", "value": "ed8b780a3ce7ca4aba78a21f6bc3d4e0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286741, "uuid": "883cd132-dec8-42e6-b700-28ad53ebc75a", "value": "49152:cqcCBuBPfINDUkLB0V3rr4MB62PTRXSS54uX5BonkqzfPcahN1CVrHhDlHbKaK11:cqVA9C9OVaBhoodumvBh8huTWEJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775286741, "uuid": "069b90c1-2ecb-4a5e-b3a2-75a7d1adb1a0", "value": 7356416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286741, "uuid": "d3e0caac-8923-4982-b903-d1817c5f9c2f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06986b5f-2ff6-11f1-bc00-82aee05be84a", "comment": "Malware payload (RodexRMM)", "timestamp": 1775286914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775286914, "uuid": "c87e6fd3-0dd5-4dc9-8df4-5bee8dc61c59", "comment": "Malware payload (RodexRMM)", "value": "6a87b2060e11772379205f10f1ed0783", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775286914, "uuid": "67fc3f3a-c7a5-4ee3-8197-65928c55af9d", "comment": "Malware payload (RodexRMM)", "value": "0bb0fa1f70e5ea93c596465e26ade61c02cd597af649368ad6a3c01544224e1e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286914, "uuid": "d918d042-e2e2-484e-8f00-ea91dbff8817", "value": "T101B1B61F6D17E5B06536CF58863BBC2CDA91A027C86164583A9CC4C68F70E2CCDA45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286914, "uuid": "33c67b0d-8790-4677-86b8-7357ee2f1d69", "value": "96:JmYHieJiIRT8eBEscOcml/2OltnF7xhyOI/C/MhSRfAHitkNxdKswQcANyaoF/r/:JmYHi5IyeBENOHl/2O97xhrI/C/qxn/c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775286914, "uuid": "68bd105b-a956-45d5-bcc5-84d91390058d", "value": 5263, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286914, "uuid": "015bd14f-c6aa-49ef-8bde-c9c743d6c14f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "098bac5c-2ff6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775286919, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775286919, "uuid": "29febc23-3bf8-4ad7-b621-2bc1b1313d55", "comment": "Malware payload", "value": "9940299fe94f8d633d90662b95ffb0de", "object_relation": "md5", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "SilentNet", "colour": "#c350bb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775286919, "uuid": "fad48709-d684-43b7-b9f3-8d38ed5d1a17", "comment": "Malware payload", "value": "462758bbe01916452f127d1c937f42819ed1676d490bb9d1cdd3070537ae191f", "object_relation": "sha256", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "SilentNet", "colour": "#c350bb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286919, "uuid": "38f5e82a-e8e5-468a-b706-87ba949a3bd5", "value": "T1C3155E24F24E588BEC5B6DBDD5493A758DA8FEEB8808376FA85D79103CE7080775B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286919, "uuid": "acc0313c-709b-43b4-bec6-71f47fd28b2c", "value": "12288:jUVIQ050IKX9oxSMD3INgghmtVLEmqtlTt011Wb5JXGlAS:jVQ0zKXiIS3wBh4YmclTt01MFlo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775286919, "uuid": "aff2b485-399f-46ca-8ae8-a1bf2de9a2ce", "value": 924972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286919, "uuid": "176e4bc7-a8c6-4252-b101-d8411398ac74", "value": "application/java-archive", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4195f943-2ff6-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775287013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775287013, "uuid": "f48b9394-445a-46cd-a22d-eef41c6f0dce", "comment": "Malware payload", "value": "09889d776e96b98e255ec262c6d6854c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775287013, "uuid": "a7ced273-060c-4d4a-ac14-3b2e92c4fea6", "comment": "Malware payload", "value": "cac9dc7ceac206efba71fb45a85997e935a914b7d1fec78ccb2d17a90714e05f", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775287013, "uuid": "e4a8deeb-26be-49b9-87ee-d5e17fa3e4dd", "value": "T1C57533252BDF0DA86631F12AF14EDA994E611F3B2DE290D55406ACF747CCCCB1C096", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775287013, "uuid": "7c1695ea-aaec-403c-8122-4ac0ad31e954", "value": "49152:OJF98QlNfk611Lf7ulBfUL5fClnPq21DYaiBm:u9hj11Lf7ulBqt2PlYaiBm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775287013, "uuid": "887b6119-aaee-4675-805d-b71d42971931", "value": 1583353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775287013, "uuid": "db26f225-f078-4176-b8ed-b0596a2b6345", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "498c91da-2ff6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775287026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775287026, "uuid": "db94c1e1-9c7b-4eae-b21c-084983429344", "comment": "Malware payload (Mirai)", "value": "b53be31bc55d4567e81190acefb6e15a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775287026, "uuid": "98bd15b3-09fa-4892-a2c2-66cf8a86f9e4", "comment": "Malware payload (Mirai)", "value": "56010e2ec81eb4a48a318cbc70289d998eec394f9dfa66baef369a56979f5800", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775287026, "uuid": "7d3d7d14-d5aa-44c6-96a1-5ec40e08ccbd", "value": "T16AC2F1582902898BC4372D7A754BEC59BDD3174E189F891822FAC1258BF372C67F13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775287026, "uuid": "a5cb3f7b-9bd9-4afa-8f6b-86406314c827", "value": "384:TeV0foxTKXtuvwdtTX9KSyaBSBjeYTfo9mmQPgta8bN4Y75f3M+2ffVCBOi7+ngT:TDoQtBTX941eYFDgNbl5PatCbYUmQAa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775287026, "uuid": "15b084da-370a-4929-86f9-204c5480e38a", "value": 27740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775287026, "uuid": "1ec7a03d-c2f8-4287-8a68-a501f7a14f86", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e7ba1f2-2ff6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775287169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775287169, "uuid": "64edd8a2-3c00-493c-b335-8cf4223a35f6", "comment": "Malware payload (Mirai)", "value": "5d20761bfcf1a6034e1e7899953ec808", "object_relation": "md5", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775287169, "uuid": "5cdf34f9-8f49-4197-82da-6a5f7199cc26", "comment": "Malware payload (Mirai)", "value": "efc5bbcf49271bc9c0392ac79924984f720dd282b7fa44341d2be26c215ae964", "object_relation": "sha256", "Tag": [ { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775287169, "uuid": "6b2df72a-17c3-410f-aeb5-5e3cb587e319", "value": "T1A7156C5BB2A374BDC017C43443ABDAB2A935B43902226E7B65C4D7303E27E741B19B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775287169, "uuid": "445d0163-811b-47fa-bca5-ffe624345437", "value": "24576:9MnLr4skk55qE8seHaitT3LmurlWIJHFhv:unX4skkTGztOqTJH7v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775287169, "uuid": "a6db15e7-0fae-43f5-aeae-568faffcba88", "value": 897896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775287169, "uuid": "4370175a-a180-4570-8fe2-b3c9d3b4f8f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a8994e3-2ff7-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775287350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775287350, "uuid": "b3497538-f339-4a25-898a-cc382b8d5d94", "comment": "Malware payload", "value": "e1a1090485a7cf7e6de8f391193334b3", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775287350, "uuid": "f0d2bdd7-d27e-43c5-a167-527af3b00d1c", "comment": "Malware payload", "value": "2d1c8e60f448085782b66dd3e51a4cbc1ecdd8dbe9391eece950eaa62cfd8df7", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775287350, "uuid": "17d397b2-1094-4c41-8ec1-11e05f262a66", "value": "T1875186B2E1C2E5E3D45B137842664FFDB97542748F8186E3CB164AB265017F8AD321", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775287350, "uuid": "7a672fd4-e2b3-43e0-9274-0d44eb092a2c", "value": "48:jXWae+lEpWzRdIw8UNUaNg4OGfeg8TK/j5PNBltENt:hq4zRdIwrXNWO18TmjRNBltk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775287350, "uuid": "075bc956-7d1e-464f-b9ab-dc5178702cab", "value": 2720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775287350, "uuid": "205fa188-891e-4e5a-bae2-2c206251ce27", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e2a09e2-2ff7-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775287383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775287383, "uuid": "7b61e273-2429-4cb8-9a3b-66070b469d7c", "comment": "Malware payload (Mirai)", "value": "dc1c48cc751ccf9bd76e16c7c7896421", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775287383, "uuid": "11b9cd06-7af5-4954-bcca-93caf8d7499b", "comment": "Malware payload (Mirai)", "value": "2525a22200d9dd29ba5732ab02ddf094271448a31eab85f57770c3fdac16dc3e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775287383, "uuid": "72bd249d-be81-4ef7-9324-c398dc664d5e", "value": "T14A142C5377224F90D325D2720BB38B5A5EEB01851EE248D5936CCB107B20BE9689FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775287383, "uuid": "069e7186-4548-4de5-b958-718c4a45f93a", "value": "3072:VZ6+Czqc11RHU9gcl3b/xjFbFTPqLwP2MESG1n3gjcwBfppR:qR115U9fl3b/xjFxqo27Sm3MBfB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775287383, "uuid": "b8df5a58-75eb-412c-bdce-1fc135e0b334", "value": 200624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775287383, "uuid": "de4513d3-8d0d-40e4-a60d-d919e080dd8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50425330-2ff9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775288326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775288326, "uuid": "a90af0fe-51b4-4b2b-91af-245fcc2411dd", "comment": "Malware payload (Mirai)", "value": "da2cd343bf6815128a0fadfcfb940a43", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775288326, "uuid": "e2247a46-00d2-4db7-9f55-de05fe4a6619", "comment": "Malware payload (Mirai)", "value": "5ca5f11f6f388258c42826f4a876f7976d8000d8d06b11e40df4ef067d420a2c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775288326, "uuid": "e544e363-3a68-4947-a9db-cc3074be4066", "value": "T17FB309527D429F13C5C221F6FBAF46493B136BBCD6EA7102ED247F91278B8DA0E265", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775288326, "uuid": "f5220c0d-a432-4a5b-ab1c-89b802eb9ce7", "value": "3072:guFtPIGVDuhSXqnredxfk/XHvT9sKQbffi:gW1IGVChUq6dxfk/PRsrbff", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775288326, "uuid": "1c2b88ca-0292-40a8-a1b7-b6546ef4e597", "value": 112524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775288326, "uuid": "5e98d807-e0d1-4bb2-9193-203a5337368f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52f7412f-2ff9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775288331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775288331, "uuid": "88a08a9f-a8f3-46e2-acea-891634ea9a78", "comment": "Malware payload", "value": "48c2b0a7c7dbf6e30ed0e9d768935a71", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775288331, "uuid": "9847ca4e-c31e-4831-bfe9-e3d5fc57dc02", "comment": "Malware payload", "value": "becff41ac0b2a1bac00013558cef0522ead367bf02f8f4d04ab27cc9fc6bbb06", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775288331, "uuid": "4f8893a6-1200-43e0-9f12-91f3e0239c6d", "value": "T1EC737A75F480C0B1D96664B40A7987F6BA7CA6321338E2DBC7702C704F216F1A63A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775288331, "uuid": "a16f67e0-423e-403e-a6b7-9ace64314847", "value": "1536:oi0T66fUydlX/yK0ksbDFwITBAfLvFyAY8mRQGLO7S+VDM:CT6QFlX/GFwIqfLvkrQ+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775288331, "uuid": "45777d8a-0fce-4ecf-a48c-9a9ba4aa3f48", "value": 79872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775288331, "uuid": "d98f52fb-33fb-44e9-9d07-ca5c59e59519", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e89a3634-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775288416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775288416, "uuid": "8f3a1a38-b17a-4d9c-9022-50d34a9b688f", "comment": "Malware payload", "value": "70af65a13a14e5deb73c31c8829dd998", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775288416, "uuid": "60d5e8aa-f038-46c6-90d2-a6863c8da11b", "comment": "Malware payload", "value": "feacba94918d32a51ff751ae4b98e9ec5823aedd525ad283ed99653b3f23545a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775288416, "uuid": "8f003442-dc85-4acb-b666-5764b28fd16f", "value": "5923028623A63F72D52148F5D7FCEF85A14A7E94AFE5180E7C113698B07035C28C8C1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775288416, "uuid": "f46174a4-3b3f-4afe-b0d0-66c21589b0bd", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsDm1Xo0Wh:yYI0ARqw1qAEW67UIWi7M8gmfmJo0Wh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775288416, "uuid": "2dbfe4c1-c39e-4625-a2b1-7f4ebf392c41", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5391d3e-2ff9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775288576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775288576, "uuid": "4b379ee5-721d-4abd-bd6d-1f6874078548", "comment": "Malware payload", "value": "b5394154587361757ad22636e5b592a2", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775288576, "uuid": "e3a6ecd1-2a58-4178-808c-bf60f5f097b9", "comment": "Malware payload", "value": "b037c93b7b8dc1a0dd521136f567560b1286ed8880d11b7d2790bfa1699bdcff", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775288576, "uuid": "357a37ea-1acc-40e9-b435-51d14e8b7dd5", "value": "T1CED6AF82FA8340F1E9911074947AF33B9B307909476695D7F3DC3EDAA6312D13A3B6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775288576, "uuid": "db3fa9c4-8429-4b47-a834-16c2506587b0", "value": "8af42523a99088a2e632499616d24293", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775288576, "uuid": "dd660b5d-16d9-4b8c-ad25-178db0101a4d", "value": "196608:UJKAhGhdWvhLIllsZiUjQWJsv6tWKFdu9C/4Ee8a:K8nWJyVgQWJsv6tWKFdu9C/Yh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775288576, "uuid": "143e8118-73a5-4ad8-879d-7662e5bc52ff", "value": 13469560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775288576, "uuid": "3b856d50-27fb-4bd2-99c4-d25da3b4c14f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f335a8b6-3005-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775293753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775293753, "uuid": "b363774a-5547-4f91-972c-c6fed03d209d", "comment": "Malware payload", "value": "35f702bf1f7bf371f86af676231087b4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775293753, "uuid": "1f952c3a-e4e8-49ad-adaf-b5e396901c3a", "comment": "Malware payload", "value": "5b95fac31ceabcc878af21555e96232f5baa47335134d358b7ed2d9a24a89556", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775293753, "uuid": "b9f257a7-30e3-466d-8edd-8c99643d51a4", "value": "T1A55523317AD0C1F6C0B61A3445D68B35DE6E30324B2A91E7B2D927796E713D2A7372", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775293753, "uuid": "d46a9f22-97d3-4426-8ff2-54677472c670", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775293753, "uuid": "6da932aa-e6de-4f24-8482-2eb1f4faf311", "value": "24576:ak70TrcaKUfmzhpqHG8FDju/DmFMkl4+qS3//otfeZ1NdlX:akQTAaKamzhQHG8pYapFnQmN3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775293753, "uuid": "fb3bb245-978c-43e7-b885-7cee594c91dd", "value": 1302528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775293753, "uuid": "02f498c6-f0f5-49b8-aef4-6b9c3fdbedca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc85c4c1-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (CoinMiner)", "timestamp": 1775297506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775297506, "uuid": "dec6c295-edf0-4208-89e6-dd3e2380ea17", "comment": "Malware payload (CoinMiner)", "value": "9f3069e77d062da63b7ba5c1f35e9937", "object_relation": "md5", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775297506, "uuid": "be1e7c0a-1b78-45cd-a61b-a36fe08f24a7", "comment": "Malware payload (CoinMiner)", "value": "ebcdf536447cba219a13756c00c97b4ed5fea47f2cbf2283ea86e80216d3822e", "object_relation": "sha256", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775297506, "uuid": "13f029ec-ff34-494f-bb2d-295fe8b93450", "value": "BD563345F4809837F139153625F884B2B07DBC7297244BDBA39E2AA56E317D83339A4E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775297506, "uuid": "9e38299a-454b-49ee-808d-13e4f1a0f39b", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775297506, "uuid": "56df8f58-41ba-4420-a166-15a3286acbd5", "value": "98304:RLJSThOfTCiFBXmfFs+JhEpCVoR8oMEOJ6Ty3RvX+UGD823FUuzmH:LBfTCiUs0VSLOJgyBGUA8Ch8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775297506, "uuid": "043457ab-45d3-484e-b922-2f161fe767a5", "value": 6227160, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7b17262-301c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775303586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775303586, "uuid": "452629a2-581a-456f-9881-d4199ec33504", "comment": "Malware payload (Mirai)", "value": "88b7f9969983196a93dc9963e22a8f4f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775303586, "uuid": "55b26c91-d50f-4b26-ac4e-e43dd7fd59cd", "comment": "Malware payload (Mirai)", "value": "f542250ae5dc2639d55689e747dcca42e62a6af253cc9eddf55c8c7239a9b6bf", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775303586, "uuid": "3d7b64f4-4270-4282-82ce-7950c1da3dd7", "value": "T16212C95BA35659A8D89C4330429F4293FBF3F97845F23B1B3D4811341C436284DBBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775303586, "uuid": "d94206b2-0435-41eb-9f64-b879cec46218", "value": "24:GxI1sosEs/AD1snix3slMQ7g+M6Ae2hSq2zwdpP+js+U:GxINsoDOiRs3gpve2gq2zw7GO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775303586, "uuid": "3577bc88-683f-43f3-97b6-052238d2e4e3", "value": 9432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775303586, "uuid": "03ca8b69-87d8-47a9-8ae1-de941b8fa8bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7febf6f-301c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775303586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775303586, "uuid": "182843d3-0f9e-41a9-bb90-5bcf3c5080b0", "comment": "Malware payload (Mirai)", "value": "0389dff068ea8f6cf4ddc4b00aad0d9f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775303586, "uuid": "06001aa3-ef2c-431d-8996-12114980b23a", "comment": "Malware payload (Mirai)", "value": "a2e39a970e40ea24d2516d09447a186147c4b123b38707406f0e7daa2e664692", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775303586, "uuid": "4f035f40-05a7-4e65-8bbf-711497986acd", "value": "T138F3985E6E128F7EF668873047F78D21A76C23DA26E1D645D2ACC1105E2029E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775303586, "uuid": "22f99170-8a60-4cff-ba3a-55522d9761d5", "value": "1536:Zq/Bpmz3dmp6iHkopmKoyz9dbYO7W8sCvZgTgKdZPHXxP8ne3WNecXIV:Z0pmQpMypdbYO7W8P+ZP3xP8LNec8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775303586, "uuid": "05afe254-8102-45ea-aac0-8f5fa2196808", "value": 169192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775303586, "uuid": "4b6f11b4-ccc3-4599-a89e-9726158909e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc15ded7-301c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775303647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775303647, "uuid": "8ef8e55b-ecbf-41bc-a286-84ac2b4d982f", "comment": "Malware payload", "value": "fdc53430902e607541a49bbcd79bfeba", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775303647, "uuid": "969a2415-d85a-4175-a761-ee48ddb24d5c", "comment": "Malware payload", "value": "c5d959e0fa47a9321072cf5a3c36b2bd8110809ae973ae0cad0b6e510bc4cddd", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775303647, "uuid": "aade33dc-7292-4fae-9af3-0a137f784c3c", "value": "T14811AB6A5681E42477248F69E0A9817134CE3D43C4990BA47CEF5A397BFDD98A240E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775303647, "uuid": "12a5f767-7b45-40b9-b8f2-f008b8c20181", "value": "12:lHZLTPFKcqL8sPgUgqKEM4yCLSUxXKAFhBEBFDgq4ZegqOEn9Ny7o2WA7:V1C8sPgwMfCGUwgYXgkG49Ny7oP4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775303647, "uuid": "36fe64f2-939e-423e-a184-7223f11df148", "value": 857, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775303647, "uuid": "7e5cb37e-bc88-4091-a8e1-8915577ca920", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfcda83b-3032-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775313021, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313021, "uuid": "828ad601-9be2-4cb4-96da-8973a285a8e7", "comment": "Malware payload", "value": "963648b9533afa95b569b58ba2fe78f7", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313021, "uuid": "9c6fbbc9-6d6b-44fc-b4c3-bca15692a5dc", "comment": "Malware payload", "value": "219d879522b3cfc498ab3e2597dcce3b96c41e7f4154fa0205922f1f283f71d3", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313021, "uuid": "ef90ed24-d083-4ad4-b3f7-0cfe092977c1", "value": "T1BB4124FAB8628E30336DC5BD748A654CA7569AAF49172E74F043743C27BC32470742", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313021, "uuid": "af1738c2-74bc-43e2-bfe1-d37879932a58", "value": "48:vkwvpihneZZn1oBydXEBtonmzEvJGU6ljiPq2MTCki:vkwYheZZK8a2mzIj6K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775313021, "uuid": "94d847f3-bd9a-454d-8ddb-6708ec1d6b93", "value": 2081, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313021, "uuid": "494415eb-0a93-46f7-a33c-e29c0b8bcdd2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7530a8fd-4dd7-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1775313073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313073, "uuid": "03538c59-f8f9-4b61-9535-75bd6d2b3cec", "comment": "Malware payload", "value": "397ff5e54194072e6d8a44a0d8cc1b27", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313073, "uuid": "ff8f1b17-02dd-45ed-94be-1fba7c757041", "comment": "Malware payload", "value": "d46555af1173d22f07c37ef9c1e0e74fd68db022f2b6fb3ab5388d2c5bc6a98e", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313073, "uuid": "8bb2c125-292b-46fe-be7d-088cb41f2811", "value": "T1DD01288E6722D51420DDD524FAF14F7DAE31F2856D226816248B31FCE5ECA9433E8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313073, "uuid": "0a5c4217-23ee-41fd-b304-9332fb6d345d", "value": "24:4ud1jvF3dudpRduJinDSx1wyx1+u5C2uK6QuTzaH+2TQuTzuC7v:4uddudpRduJiny1wO1+uA2uK6QuTu+29", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775313073, "uuid": "7dfbefa0-52d1-4a12-b9c7-b9a2d21e8e0d", "value": 795, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313073, "uuid": "3bc55bb8-052b-4281-b841-90aaffcde7f2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1739fd1d-c217-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1775313073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313073, "uuid": "19fa2b6a-c282-413f-aab1-adbe2ac6cfe7", "comment": "Malware payload (CoinMiner)", "value": "a6cf2bb96f20979d0d35965551b13fde", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313073, "uuid": "f69745ba-f7e3-403f-8c3c-7024b843e239", "comment": "Malware payload (CoinMiner)", "value": "dbb7ebb960dc0d5a480f97ddde3a227a2d83fcaca7d37ae672e6a0a6785631e9", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313073, "uuid": "988b7457-f52b-4830-99c0-368112db2089", "value": "T1E4753308476458F0F7A4E5888BCDACAE631AC95255F70F4ED4329CF35EC875336A2E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313073, "uuid": "c573ce02-aee7-4a85-8a8f-a5db2eff50b0", "value": "24576:hzfEtBkjj8t0D/p5fAZ6LNnw3sXQyXQ9enZM/CTC2c/w9pwTRfkxZwFfV3h:hzKB8j8y/fvNn005geS/AX99SVkbwR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775313073, "uuid": "140decf3-238c-4383-9482-6bc69fb6d344", "value": 1560860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313073, "uuid": "939cf883-289f-47df-afa0-0edffa08d80e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef1309ad-c1b8-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1775313073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313073, "uuid": "3d8dd079-c612-49b9-9418-571d41ed7a48", "comment": "Malware payload (CoinMiner)", "value": "62802abcae18d915a106788308192def", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313073, "uuid": "260936d1-01d8-482a-9459-0c2fd9842e1d", "comment": "Malware payload (CoinMiner)", "value": "3625d068896953595e75df328676a08bc071977ac1ff95d44b745bbcb7018c6f", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313073, "uuid": "c93b7351-7633-474d-8920-d73e7da8f487", "value": "T1E85533D67B8493DCC13CF099E908DC283CECA9248F776D04DE5148C63667BB58A58A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313073, "uuid": "0e3ccec5-f6ee-4239-bee7-d0320eacb6d4", "value": "24576:yaOwVvvYm3CwpbTqfb2tEZYclsK21F9vJLESiWiV5:y3wDTqfespsBfxJM/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775313073, "uuid": "2c4e9682-b79c-4d93-829c-62219fe2d3ca", "value": 1299516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313073, "uuid": "5b206949-438e-49b0-9568-85f09ceef930", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff0364fd-c193-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1775313073, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313073, "uuid": "2af40e36-c888-46f4-8de0-b80fec12d050", "comment": "Malware payload (CoinMiner)", "value": "aaa5098c9caafccf15362b017825c64b", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313073, "uuid": "95017ed3-cd31-4e9c-9c65-df212aeae119", "comment": "Malware payload (CoinMiner)", "value": "59c29436755b0778e968d49feeae20ed65f5fa5e35f9f7965b8ed93420db91e5", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313073, "uuid": "529b4e7d-df7b-4dc8-b413-201ccf65d406", "value": "T18B9533D309864BF0BFA2EF3451585D86EA60EE744B7CB2B8F3B0A27436436E5E1604", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313073, "uuid": "236af822-40f6-4db5-bc8a-f450f2595946", "value": "49152:EpCKabVQ+9qlNlpjN8H8JZGtucdfFY91ujYIQ+:fBqnN8H8HIazujYIQ+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775313073, "uuid": "14da78c9-5840-4d6e-8c5f-38842e4966f0", "value": 1880264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313073, "uuid": "9de155d0-5383-4855-a4d1-d967f2c0e690", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c7fb763-c1b1-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1775313074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313074, "uuid": "24653b85-9562-401c-84d2-1bfc3a75220f", "comment": "Malware payload (CoinMiner)", "value": "ebbf199c7813577f72daa241d9fb3398", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313074, "uuid": "4592594d-1d91-45d4-92f5-a1caf2b30fb9", "comment": "Malware payload (CoinMiner)", "value": "048e374baac36d8cf68dd32e48313ef8eb517d647548b1bf5f26d2d0e2e3cdc7", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313074, "uuid": "4402fcf5-0df5-4894-bfe9-7b0d8ec06570", "value": "T1378533346A465C25267B0FF4809531371CEB3AF7210AE5864E8E7CDD821561A92BFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313074, "uuid": "9205b6d8-fb44-4db7-980e-d0a2efe8b302", "value": "49152:1LtoMxTuZCBqOoEVx8y9y3p3EesY603jBY:foMxTSIqOXVxfqp3Erj0zm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775313074, "uuid": "ddd99912-2c81-4581-98fc-839f9e5966d1", "value": 1748196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313074, "uuid": "b6c74163-8e98-48a6-a32a-9d39edbc73e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5167650-3036-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775314668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775314668, "uuid": "1c5fe729-104b-4384-ad7a-7908d551bb9e", "comment": "Malware payload", "value": "01ca29c105774bd2416945b8203d8a2d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775314668, "uuid": "c783966a-1c2b-45ff-948f-cbe3c53ca971", "comment": "Malware payload", "value": "5b15dcff5b4960235476057ddb138c7b2539bd253be814100fd2e36215fcdc61", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775314668, "uuid": "f1f6364b-d150-4112-adf8-9b68a5d2ef43", "value": "T131364C57F85151F8E1BEE270C5565223F6703C881F3223E72B01F2E52A36BD49A797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775314668, "uuid": "06e91e75-bc5b-49bf-92c5-45d141197cee", "value": "49152:sWJtAgZD0rb/TivO90d7HjmAFd4A64nsfJm+pskbwNIjdzmZZgeg8htzRBFjUhxd:5JX8mLRhXjwEvM0Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775314668, "uuid": "ce2bb0b4-df83-411c-ba56-d37f95b86fae", "value": 5275648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775314668, "uuid": "a1d21e8d-a2ce-46fb-bb11-e3cd82e09188", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec16629b-303b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775316934, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775316934, "uuid": "2923484c-a09e-4bcb-b474-4334ead7d0c6", "comment": "Malware payload", "value": "2f375f800776b788b22c9e3e5f65ac23", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775316934, "uuid": "b08cf297-79c5-4b50-8757-9b051dffaadd", "comment": "Malware payload", "value": "86c0889afeff6ef08fe532ff18c1ac7405b3c913c249e76efc19bac39b713917", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775316934, "uuid": "628d9d95-0f09-4dcb-84e2-27fdc4202829", "value": "T1D726C708ACC82BAAC02C5B7495FB8E5623701D148AF55A266265FED9B8773347F43C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775316934, "uuid": "01d3fa07-ac94-4685-9673-3ac978cd6904", "value": "24576:iZg93OzH+C/hkLRk07EX5A6Z5UMM6Q5e0aWuMTOZWsC8tG/OjpF5hBUea/9hc5TU:/sIk0O9BV0arZTC8tGl85T11", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775316934, "uuid": "5b491093-c793-4ebe-9223-a83078b39b51", "value": 4849664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775316934, "uuid": "6f0a4366-8505-4059-bac1-5fb003285e49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1e5076c-303c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775317347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775317347, "uuid": "362eac91-6667-4109-9f21-b1e98f62c1c2", "comment": "Malware payload", "value": "aa0dbd401e1f17e9f6439e8a3edb437a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775317347, "uuid": "9a24ec2a-ca1a-46b6-afa1-0d51e4e0cca4", "comment": "Malware payload", "value": "19d1a129a41d8a60a9ea06a47efd1b4f7ac92d8a666c7c8775c0da0dd2cbe5cd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775317347, "uuid": "e2646a2e-4464-4baa-8678-24cbf1befffb", "value": "T1DB161A9BB8914682C4E4367ABCBE41C432A30EBD9B9B13576D05FE3C3ABE1990D357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775317347, "uuid": "d5c2fc7e-7fb4-45b4-a386-cebc5ba9dd31", "value": "49152:2epM6Vd/JpKyC/NJc+Az+/iA/wCOZj11:2epMIH/CLatAY1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775317347, "uuid": "3ba4c900-dfea-4e91-968d-4202cd583260", "value": 4259840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775317347, "uuid": "6c1d51ec-a9fb-40f9-a687-1e032ffea1d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5b30ce5-303d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775317675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775317675, "uuid": "69af1d89-926d-46c2-8f86-b60e494b7fa2", "comment": "Malware payload", "value": "6ea35b32a313cc642792187e080d65f8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775317675, "uuid": "6f1f5f9d-9a82-4924-bd8b-d5763e50039c", "comment": "Malware payload", "value": "853b1386c9bfe386a49d3c2efea9e796885b9e93a95efe4c9cc5662faa343abe", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775317675, "uuid": "3614ea2f-8f16-445d-9851-b3960698a4d3", "value": "T18E162957B8924682C4E43A7ABC7E41C432A31FBD9B9B12576D09FE383BBE1990D353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775317675, "uuid": "4048d15b-8794-41f3-8625-3e7d3b2b8919", "value": "24576:+Lqt/Q9Y7n9qYzxntj7A5CYjZ6MCbn2pdXj1l1C+eD/hJoe6I4dPyeqz4SSnLZ27:/j9XdJ0maElQvsya90gCu1wZz11", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775317675, "uuid": "864b5925-82fc-453f-a7dc-9b48a9a3f152", "value": 4390912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775317675, "uuid": "2d87260e-f4ba-46cf-87e7-174394660317", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94e03489-303e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775318076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318076, "uuid": "5a6550a6-773f-4220-8507-88efd16bfaec", "comment": "Malware payload", "value": "483af46310ca903ffa35b18f3df95b59", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318076, "uuid": "c7a6d76d-9abd-4ddf-a829-3f05b3cf06c9", "comment": "Malware payload", "value": "a1473fd06e733f544dd35db8f778d1584f71e5870c17beb9ed86cade373312d7", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318076, "uuid": "e2d30acb-3cc2-4861-9b02-20d75461f06d", "value": "T128040EE3771042BB6D75C8DBBB1A48D9507DBF1007A0A0F29B8FB891D4E4766C0B86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318076, "uuid": "6c592566-f831-45da-a1a9-9f9ef8253e32", "value": "3072:IKb/zalVJeZKoLuJCb9ymh4M456FQLNalcBEKrtKf:DHuc6alcBC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775318076, "uuid": "e8a42114-2e6c-4fd6-aaaf-a142e29dd3a4", "value": 177079, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318076, "uuid": "d7d582ac-c569-495a-8dcb-e1c51f044ef0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6b9c825-303e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775318160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318160, "uuid": "d5615496-35ed-42bd-8c7d-cec9402ce3b1", "comment": "Malware payload", "value": "f27f10dfddfc6219c5e339a3aa6fae45", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318160, "uuid": "28969db5-4392-4574-9fd6-7d7d24b07820", "comment": "Malware payload", "value": "d96666f9787eee49dc1b9e8685e6985105b8366eea975767846ca3e2b4c7888e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "P2Pinfect", "colour": "#D18D7D", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318160, "uuid": "5e339c87-09e6-4343-b4c5-a0ee10dd3505", "value": "T1A7E533FF804A26BAAD0C769967BEF6C50751FCB22EC314118E9BC6CDC6B44F966014", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318160, "uuid": "ac7f7b09-d8f2-44a7-b814-86d59e66be9f", "value": "98304:xMrc1fEjPY5OmncvZSeNXLJhYZcdLr7he:aSETDMchS6bro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775318160, "uuid": "2dd2c9b1-b7cb-45d8-9bc8-165309dae6e1", "value": 3320656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318160, "uuid": "6747fde0-dcde-408f-a915-3afd1e3bcc45", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16aad771-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775318195, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318195, "uuid": "b1713365-5ec9-452e-ab0e-0d6947a5baa6", "comment": "Malware payload", "value": "e739dc29e48462e4bee88c21474e51a7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318195, "uuid": "ea836408-db33-4917-a7ce-060fd22c2636", "comment": "Malware payload", "value": "56ed019e39933567056a99aa4822422af73d09886158c6aca16082388494d2f9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318195, "uuid": "e92008d6-798b-4899-b6b8-19d66856bcde", "value": "D9F2024633943B73E16255F4E3BDAFCA601E7D64DFEE202BA4413A2270B311D688D81A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318195, "uuid": "e69d66b7-89b4-4398-906f-5ca9f4efb4b9", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8g:yYI0ARqw1qAEW67UIWi7M8g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775318195, "uuid": "b94ac832-0ae0-4a73-9fd2-b7464c4a14e4", "value": 34752, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ba4119a-303f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775318276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318276, "uuid": "dd18ba98-04f5-45ff-85bc-59f0c2a014f4", "comment": "Malware payload", "value": "ce733a391f3fdd575b03865b25302412", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318276, "uuid": "54b6c828-0c85-4b94-b492-5377cbaa0411", "comment": "Malware payload", "value": "49628d273c0a1503daa6391a635f9dacee65f145666da19771a73bbd10450831", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318276, "uuid": "c6143357-a857-4645-ae71-fd2612d76b57", "value": "T1F73607127F98EE1FD2A421348AA7C23423D93D05C6F025338756F3192EBE2759D5AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318276, "uuid": "2698fb53-0931-4393-9ba3-1daeaea3fb73", "value": "24576:v2ohvjkVg+z5ETgjmi6smbwilYhCw0+GGj8lVGaZt/4wc+lMWiYCID:v29hEJi6iilYhyVhlVDZtwYviV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775318276, "uuid": "291b90fa-f62c-478f-b70b-3c9d840b96d9", "value": 4915200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318276, "uuid": "df7ab747-f3fe-4f03-b8cd-32d59828d98e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb6db58a-303f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775318597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318597, "uuid": "ce01e41e-2aab-47f9-a764-b9578ff666f7", "comment": "Malware payload", "value": "b01e681b014b90e413e1ea5eaac26f3a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318597, "uuid": "2791dd06-9b6f-4049-b1f1-6d0088ca06a6", "comment": "Malware payload", "value": "09e5861ab796fcb78531f7fee2201adb2b495f35537dcbc177e79bfd270461ad", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318597, "uuid": "c65df9f2-f26b-456c-ac9e-76a696f7a4af", "value": "T1A98309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318597, "uuid": "2bd263a6-4863-450a-8294-d0d52b7c14a5", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnfWWa8VN/:XEKltp9txAX/yr2pbfWWZVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775318597, "uuid": "e3753029-9e04-4799-8d53-02de1e08654d", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318597, "uuid": "6d48f9b2-f55b-44c1-ac81-898fc5d147bf", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e51e53c2-303f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775318641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318641, "uuid": "5392b19c-82a6-47f3-8ecb-48af9cff5cdb", "comment": "Malware payload", "value": "22de919c37b7e1441f201bb579507d58", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318641, "uuid": "b8116f62-1978-4669-b6ef-90a8b7158acb", "comment": "Malware payload", "value": "8d5b91bf1727fb9ab994b43a718e625de830cefeaa14a1809e05b96b021bbd43", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318641, "uuid": "ad690360-c538-4b9a-86b8-784959a39190", "value": "T12E86334176A0D237D2BDC9B189F18D21222A3875577258E7627D4EFA5F063E4A3323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318641, "uuid": "fc67aae3-f29f-4d8f-81da-34d3f704829d", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318641, "uuid": "76ef3ce9-15bc-4d17-bf34-dc26f3cbe077", "value": "196608:6g/Q5PZICYEIXCj5k3eF6GJhvJRzYw4kfsiBDBMP8wRWem+quTQm3:1Ud5k3gnJbYw/VG8wR9q+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775318641, "uuid": "60797c47-6dec-4b05-a652-859de83d3bcd", "value": 8611328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318641, "uuid": "787d9520-7932-480f-ad1c-acb373195130", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e143fd7-3040-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775318790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318790, "uuid": "668a40cc-3ae0-4d30-8073-57ebde27cb7c", "comment": "Malware payload", "value": "436360a4ffa91718ee9105838af02246", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318790, "uuid": "bcd4c9eb-03ca-485b-8c39-bd6f7a1203cf", "comment": "Malware payload", "value": "08307c3ec55d592e95e83bdd6a358aac7ce6b2094d8925225524dfac6fd79e65", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318790, "uuid": "333e29af-089a-4a1c-9df0-fab48ba62a49", "value": "T1C826C809FCC42BBAC02C5F7441EB8E5263746D084AF55A2A6264FBD8B8762747F47C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318790, "uuid": "9511d4a6-ad68-4f5d-981d-b9724cdf6c74", "value": "24576:3OYf9hnZNKVhSJXB9XafS/J0JYLZ+oaUJaeLSYUIMVk5gN/dj92bx5j1PACID:N9hxITUqQUrVk5gjjY5j11", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775318790, "uuid": "7838b73f-891f-4a8a-af7a-9186f10ef02b", "value": 4849664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318790, "uuid": "145a6561-0ef9-419c-aac3-7dd7e240f784", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8bbbcb4-3040-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775318996, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318996, "uuid": "88a7604d-6e15-4df6-b10b-5cdee941aaa6", "comment": "Malware payload", "value": "b1c2f3e2b736e030a3711c6794e6b801", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318996, "uuid": "0235f707-436c-415c-b740-05b6ea823bfd", "comment": "Malware payload", "value": "1232ac9e5d648f7de060314b4d81ffe72a8a88a3558106ef73aff8873ca7ed61", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318996, "uuid": "de76cdc2-0639-409f-a24f-cd6844919cee", "value": "T1FCB6333032C4D6FFE211883071FA8736855A6B715BAB8982B55C1FFC6F711E692873", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318996, "uuid": "5b5d3e9c-ffc0-49cd-90eb-da3f415ba8e4", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318996, "uuid": "b3a26625-0d13-4099-a2a9-6105af337aa7", "value": "196608:3d2kI0mvuZz8FkRCPpB0CtplNLpwkxGsTUeqYfL0qbtgMg9yVRqRiW2:tTlCuZz+kRCPpB3tnDisYvCAqbtaE/gk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775318996, "uuid": "f7210cd7-3ac0-4f6c-82d4-ef2c438fdbf6", "value": 11413504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318996, "uuid": "bc2b6d98-3412-4531-96b6-a4047eac49ee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a854e85-3042-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775319643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775319643, "uuid": "fc9fa01a-4155-4ec4-8001-bf02d981dc6d", "comment": "Malware payload", "value": "6d3de26ebfb119864ca4ec27196f531b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775319643, "uuid": "ebaa0c1b-1d1e-48f4-9bc3-5d03a48a97f7", "comment": "Malware payload", "value": "a443d436c6a9c92de1816f3e80b1969522dc262929f7f5ff576af0d27c0bdd78", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775319643, "uuid": "5467f178-ff50-491b-8867-8a27637c41da", "value": "T157931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775319643, "uuid": "133c0065-e9d6-46ac-80da-b7cc7c6ecc74", "value": "1536:0Byp1tF/uwMmAIa14oXx+I7epeV7tb73WdxCrCitkb5fv2v05xsprCKH1sPyKbt8:08jI00GitkbFv2v05xspr51sPyct3y7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775319643, "uuid": "20bd3dbe-9cce-4fa1-adfc-716ff3700b76", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775319643, "uuid": "4e845a2b-a4c8-4583-81fc-cedb2ababd46", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a52df0a2-3042-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775319822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775319822, "uuid": "172d759b-8dc0-4d40-8f79-6cab45b24910", "comment": "Malware payload", "value": "e480a820782bcaaa67340ff5285147a8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775319822, "uuid": "951b4474-e0be-45e3-810a-fd36728da537", "comment": "Malware payload", "value": "bfd8383d7a4e25a23a5a598aef98a09d3f92ed6535a4fe7885f3749a6a8751e1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775319822, "uuid": "31b07b3e-6d18-4364-a749-5cf72ba34a3f", "value": "T157262A136E18E71EC66911345CB2CEA8673A1C8A85D7A917B345F309B9F20BC496FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775319822, "uuid": "529b863c-ba4c-40e6-8394-ee5325e2b368", "value": "49152:7gSY8hicBZ1reTK3J33N8a0NXTG3J3vB8uQ9uVWxQaF32yQMzFXR7ZJ2/bTrjIIr:cSvaUbQrC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775319822, "uuid": "0281cd7b-96e0-47d2-9296-7f09cb94a7f9", "value": 4849664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775319822, "uuid": "fdf0bc48-3632-46ed-a535-8ce821f9e214", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9654209-3044-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775320795, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775320795, "uuid": "3e784981-5e7f-4e50-ad8d-08f1a4dd9726", "comment": "Malware payload", "value": "2dd1e6b29c1a0cfeb5f886e4f823a3ff", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775320795, "uuid": "e053b07b-4b0e-4893-aac2-eb2b9b22fe60", "comment": "Malware payload", "value": "5ec9b342f5f10afaacbc9650557b4af9f1c9d3964947343292f704403fa7fd89", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775320795, "uuid": "b357bc4d-60b6-4649-9c51-f719b9052e71", "value": "T19EE533CA908A67B3E8D1A763F00E7BB860F08B5EEF01A0547A7221B75C02DDD73569", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775320795, "uuid": "3932d30f-06a4-43de-bb2f-6cd7cd8918e1", "value": "98304:7aLvSFZq6TWHSdveftg5uG6EEOUIeZLwWda0k8lb:7aLK3qhSdvxQG6xOD+LwWda0k8F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775320795, "uuid": "cfc688c8-02c3-4b44-9ad2-2c9f0acb762d", "value": 3294012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775320795, "uuid": "ab52f693-a137-4e66-bade-7bd6cb29b846", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cdbcc52-3045-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775320989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775320989, "uuid": "936a057f-964b-41a3-9c43-7c7177faed22", "comment": "Malware payload", "value": "a8b9faa0c5caa4a7193dfd1801b88fc7", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775320989, "uuid": "7160e322-ebb4-4fb7-a175-a461cc9bc8c8", "comment": "Malware payload", "value": "67114b42f4590b462d185c96bef65cccac34659e6d95b47315be464bcabc5187", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775320989, "uuid": "665a0f15-260c-49f9-9173-3ef7fc0355a0", "value": "T1EA165C90F708D23AE98B0A3249670F7473502E46D6F4896F430AF75F06B16E69A1FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775320989, "uuid": "f827c491-178d-4cdb-8120-a5e768e1cff4", "value": "49152:JszbPl7gwCItWGrbcTweZSgU7YDVFSrtbcoX4RNxSVE:eXPl7gFItW0naacoIRNxqE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775320989, "uuid": "17963de2-e6f8-4603-bb52-b9f195c54790", "value": 4194304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775320989, "uuid": "9f1fcb6a-b25a-4fbe-b112-9c4619cec566", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af072829-3045-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775321127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321127, "uuid": "b025daf3-0780-4d0b-abf1-a1f0217a7e0b", "comment": "Malware payload", "value": "773aa88b7cd55192e47a3ad9c2bec27a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321127, "uuid": "747e741d-3702-4d92-86d7-76b77dc0e9c3", "comment": "Malware payload", "value": "399ca66a6dbf6b038348d9b64a1bf700dcbcb6c5b86ab07a4548e8313633def4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321127, "uuid": "1ec6a1f9-9136-448f-8911-11de753c75d0", "value": "T130161A5BB8914682C0E4367ABC7E81C432A31EBD9B9B13676D05FE3C3ABE1990D357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321127, "uuid": "04cdd6d5-0e13-4afa-bb80-8818833b3996", "value": "24576:eGuDPn90fi4LhiLp/CljtwWpb631Zom5OTa9j12nceACzzhkSNRPNR+F7PnJ0Nza:LHPnr2Z5gdYPTqLyuUnAQ9muEZD11", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775321127, "uuid": "b5955d57-30a3-4002-bbf0-16257bd36d52", "value": 4259840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321127, "uuid": "c1c8d896-d8bf-407b-995c-afff0ab0eb1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c262cd0-3046-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775321498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321498, "uuid": "2b313fd6-0a7f-4149-bf10-c6f308b5551b", "comment": "Malware payload", "value": "b46c2e6247162e619569b27840c3b402", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321498, "uuid": "9795162f-3faa-46a4-b7e2-80aada3f351f", "comment": "Malware payload", "value": "16bc6563f45cbd5cf48e6ea4ec4ce1a10ee5b272f8a27c6b3c61670966b526c2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321498, "uuid": "24e440cc-c23c-4ec0-8f57-d3ed0fc10550", "value": "T1EC162B02B6042EA9C8654D3785A74F6137727ED42F319743E744F6BE69B23060F26F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321498, "uuid": "d5d8178a-60e1-45ed-a4a5-a83325c26154", "value": "49152:QHI6ohLFjJCK72d1fSWJ90mz5EjEVEJxpkj1V:QHI6ohLFjJCK72dtpER8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775321498, "uuid": "f5b734ef-9e2d-4fef-8bcf-5134c5a9025d", "value": 4325376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321498, "uuid": "6c1b3f45-17b3-46be-a87a-b0a67134995a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae03156c-3046-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775321555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321555, "uuid": "e1b4786f-14cb-4308-8a8c-6b504623c312", "comment": "Malware payload", "value": "1191afc2a50dc0219cbcefa4f21b6b25", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321555, "uuid": "0b1b689c-3de3-45c1-980e-5c316f1f6bee", "comment": "Malware payload", "value": "b2ab21ed0fddcdc854891499af9112a9319b8913be51f7d8556508b74c0268d4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321555, "uuid": "c24381fa-721b-45e3-b380-169da09a727f", "value": "T17C16F850FECB10F6D9072D7054ABA22F17315D094B28DBC7EA64BF5AEA376921D322", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321555, "uuid": "32ec6b4e-368a-4ece-947d-c0eec28742e4", "value": "49152:EITwZUDsRNoUcX6FhNK/VswbNWkXXTu0SZ60gk8KUfPPPwPPP3PPPlM5D11:jTChR2XohNo3uq2A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775321555, "uuid": "1d23fd87-ec33-488d-8035-c776d3547b4d", "value": 4321280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321555, "uuid": "9fef57c2-8fdf-46ac-9475-f467962bd50c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd141547-3046-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775321580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321580, "uuid": "00bf0dd1-5d07-4304-bfcb-9f8d835e97dd", "comment": "Malware payload", "value": "0253d11b6b50fd0b727609c0a581aac0", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321580, "uuid": "f5a395c3-740a-406c-b170-7c975016c0be", "comment": "Malware payload", "value": "fda4d39ecf0bf02851275c1eceaad1754e4ff81d9f87ade1b1e01831d4ff06e1", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321580, "uuid": "9404c60a-1283-4bcf-80e7-075ee9be1e58", "value": "T1D096335E686A9FEDC57E2070F1CC4B5F5EC6280550B8D2C4B8078C234CA3AEAB7D67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321580, "uuid": "7c939f16-a1d0-421b-9741-ee4c7cd692ff", "value": "35a81d16af9f2ba6d515f11152d0364b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321580, "uuid": "a225e073-998e-4e94-a8bc-8dbb77606c68", "value": "196608:9cxNNs65IzHdjS5i7xps4hW/B28/oGbhihQvJOFH4OGY8+akSl:90VgjSoVp0/BxoGbhihQROFYt+a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775321580, "uuid": "77baa68e-9d94-4d13-9786-f2538230903a", "value": 8932248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321580, "uuid": "d6ccb3e2-7ac7-4c21-801d-3009b6c0c70d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea7556a7-3047-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775322085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322085, "uuid": "0f96bd0f-c61e-4934-9861-85bdaccb518b", "comment": "Malware payload", "value": "73f0f1f6807ff8d9bff74f54d2eeb8bb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322085, "uuid": "03f285d9-abe3-49e9-b393-86977d3a0eef", "comment": "Malware payload", "value": "c00a5021dfb1e6347acde766a7da7fab455e1d43fa3e472be4ba9ca94343f32f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322085, "uuid": "554d35b3-36f0-4061-97a5-c11b089973c0", "value": "T18A167D98FC2DB462E9D87DB83F6502947135FD899F40C3276618FB9DA9F23248F216", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322085, "uuid": "d71dfb4d-6322-4143-a61b-0ca7a34db79e", "value": "49152:Rt5ff5Vspxs8pD4iMUp+5gY5EKOMzDGKYz1V:Zff5VaxsbiMUg57ETV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775322085, "uuid": "910bc404-1085-4d6b-be4a-feaba1bd10c9", "value": 4194304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322085, "uuid": "c1dfa9ed-0408-408f-974f-34bd1124631d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "261e2784-3049-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775322615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322615, "uuid": "d2dbcae1-06c7-460f-9fa1-5501b66bb2e2", "comment": "Malware payload", "value": "8d1547f0cb14dc1977c98b3316cc7cf5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322615, "uuid": "6f2b2cf8-0800-4490-a1ab-180d1b8f5aa6", "comment": "Malware payload", "value": "3d2ae70b2b1a4bda1790a40f069c411044f3ed043411c206479c9422dc168bc3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322615, "uuid": "7980a12c-cf97-4cff-a845-a27d82db2ef1", "value": "T16093E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322615, "uuid": "17b479dc-86e1-4a7a-a02f-50f0dcee352a", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXYIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775322615, "uuid": "f90c116a-29c0-4596-b53c-4bdc4fa2388e", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322615, "uuid": "ca7a7701-b961-43ef-b042-4368604876b9", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2994914f-3049-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775322621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322621, "uuid": "2518e9f6-a2d3-42d1-8acb-ad4afe362e44", "comment": "Malware payload", "value": "63f115a21a59470cfab2ae85c031f8d8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322621, "uuid": "49711b8b-1af0-4e12-947e-b08b73e7f2cd", "comment": "Malware payload", "value": "adf6ccf1703b78dec7662403b966f59f4d661232094d685b1a9c5d427f7afa85", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322621, "uuid": "d45c4afe-fc3e-498d-a4c8-998bc96c34ab", "value": "T19A36FA15AD826B66C2DC137845EF665722502E499B91072323A4FBF83E7333DAF578", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322621, "uuid": "8dff8907-ec49-4e6a-9022-691895d3c5cd", "value": "49152:VN4FWaDsZhJ2pRhoIKDnL9l/EZl5tAAXgpDAfj11:VgDsZqpjoIKVU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775322621, "uuid": "76aad12b-9294-448f-8633-e06bc3c46535", "value": 4915200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322621, "uuid": "1cf78b02-37b9-4a54-9b72-9ea0b4372b51", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "413c467b-3049-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775322661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322661, "uuid": "0060ebed-0f24-4197-9774-4b5cd975d02d", "comment": "Malware payload (Mirai)", "value": "a6f401c9f8b25126025e7ac4b4c54220", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322661, "uuid": "7b6cd4ce-e037-4f9a-bffc-6d46f13f78e5", "comment": "Malware payload (Mirai)", "value": "ece4a5965e1adec4377f4867db49fde221f7c78c1289469a89a9b0cbae54c377", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322661, "uuid": "d768897d-94b9-4ea3-bc4f-cc200c884a80", "value": "T1EA5423C2DF395DB0D56743F33C5AF8989CC2890E68F5B0812EAA7DD0213965CAB573", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322661, "uuid": "ac6b8787-adac-4250-8651-9d8e67436d17", "value": "6144:Q0eg/k7i2mxqnfkQe5AkDtUSx04RjZuLZdKPrRBZkmU:N//k7i1GOQZdsRBZE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775322661, "uuid": "a6bdd114-5f32-43a1-9164-6cb0214652e0", "value": 285952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322661, "uuid": "b72b2bdb-aa58-4c7f-8be2-8c8f140a56ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4143d239-3049-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775322661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322661, "uuid": "a970c4bf-c862-45b8-b07e-4534c3a24361", "comment": "Malware payload", "value": "8a74c38a6044fd1464c76a6ce25eb0c5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322661, "uuid": "13572f7d-f89e-4a4b-a12c-3ea98307fc0e", "comment": "Malware payload", "value": "58a28a05c1a68fbb5a9988b2f046a289dbf277fe95f3aeec8f8d6a7373324539", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322661, "uuid": "838a426c-3d0f-428e-a72f-f1c9aba46e5a", "value": "T19F2619176E28EB1EC22811345C72CEA86B391C8A46DAA517B355F319B9F10BC4D6FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322661, "uuid": "ac95d25b-6ae5-4250-955e-9a97eaa8fe4b", "value": "49152:8aquvPfZQLXLZYbzittYTN5G7eHjtVFeTx16DmHjVVFZJbeKD2nl5/f77mbw11dz:rqumu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775322661, "uuid": "2f4a8bcc-59a2-495c-b67b-362e54e12caf", "value": 4849664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322661, "uuid": "a8f15468-b04f-427c-a6a7-5ad8a87484d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1775329225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329225, "uuid": "c2bf7da8-a8e1-4d5a-941e-93c8ece6458a", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329225, "uuid": "7e5b3e6d-381f-4146-93bd-9c612fcff056", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329225, "uuid": "0e9eb08f-5687-4c3d-b0e0-a34bc6796ce9", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329225, "uuid": "f6a2fc55-7ad7-442d-86f0-dacde507ee2f", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775329225, "uuid": "0e15c08d-fa8f-4a80-99cf-e27a540133e8", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4446e95-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775329699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329699, "uuid": "9e5ea752-0ee2-4ba7-a992-0be6a0aca25a", "comment": "Malware payload", "value": "7fc78617822d26e161381bd28c4cac27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329699, "uuid": "ada44ab8-b1d5-4e49-a2f1-bce4e578570b", "comment": "Malware payload", "value": "4db115d6aec8de6663fbfc8a7e94ab34adbf3c718bb9bd4d6100e65198b85b55", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329699, "uuid": "e61381eb-b890-4f78-871c-f410fee195b7", "value": "T1376412C26B508F16C65D81728AFBCB91BFE601E526E08546B33DE800DFD264C5A6FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329699, "uuid": "4b95ba53-1da8-4932-a55a-497e27e741c8", "value": "6144:uRjR4tudkSB23bFVPYIJfHMACIaf6/li74liAy+FQ1k5L0RPtKt+/KKoy8l:akufEZVPYIqJIaiI74e+K1k5L01U8yKA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775329699, "uuid": "30c7b377-3d72-4b65-81e3-7f22ac1d47b5", "value": 324829, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329699, "uuid": "68ff7a37-f2f9-4526-bffe-51ef03262716", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1d08659-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775329748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329748, "uuid": "5f20ef13-5eca-41e2-8565-066371e51219", "comment": "Malware payload", "value": "e320f077ba74de8ac4924a064dca5028", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329748, "uuid": "718297ec-5b0d-45bb-ac4e-e21a4a00283e", "comment": "Malware payload", "value": "3e7a55dfc594af6b7d41d2855845d8b7288904e7e0f23d25667d8b4cd67145b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329748, "uuid": "1f056dc8-f21d-49fa-b47b-5239c4e66bea", "value": "T1AE5402A0F7284533E0468EB56D7F4776EB284E6201B2C13C7711EF563A23935DA8B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329748, "uuid": "787a65a8-ed32-4a86-adfb-b13b0d4b0dd4", "value": "6144:I7DnbnUJ3sK+ilibzRowG4hKpuX3hgSR+ZXrPxBr:+K+fbFowG40PSYrz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775329748, "uuid": "27bc19d4-b04d-4c4e-8e56-d5b7fc70bcd7", "value": 289221, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329748, "uuid": "0aae8cca-e747-46fc-b008-11b8cf9bd020", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1d0b0e7-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775329748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329748, "uuid": "c7525be2-b449-457f-ba6d-3dce8df87f5a", "comment": "Malware payload", "value": "3c3a94b8baeebe520dc3d2f7dcc806b0", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329748, "uuid": "575fe9de-019b-43aa-9c5f-bdba73169a69", "comment": "Malware payload", "value": "b5edb9fc654b260661c83360090194e1951a2d7932fc3c9d8354c3687507343b", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329748, "uuid": "c49dc52e-1fe5-4ba0-9e30-59367d3d7392", "value": "T10C440225F090EBA3C6D16B7BF90E565973030770E3DD3301DE2A8A3563E2A568F366", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329748, "uuid": "75aff53c-3553-4189-afe4-cd35815b86fe", "value": "6144:SiqQbbQ2sG+RtTJtCOCWROchiFuo9M/6Sd+7H0:hqSc2sG+RQVWSqST7U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775329748, "uuid": "053b6ab2-cabf-43cc-ad06-34bfbbcee063", "value": 253697, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329748, "uuid": "40ffb31c-5b06-468a-bc32-6c7cbbe21119", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1d1e0f7-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775329748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329748, "uuid": "8a799489-0c6f-43d0-954e-8fc42112b33a", "comment": "Malware payload", "value": "0143eb760a1119e56b6844e20a1bb106", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329748, "uuid": "7bc0382b-1083-45ae-9ac4-dd5f23c853f9", "comment": "Malware payload", "value": "bbf512e2470851f6cb53f8874846a9fcc58b741a1e0662b2fa1b8890004e04ba", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329748, "uuid": "ce86edba-1c55-4a8a-9d72-d5a569850b58", "value": "T1B9340141FAA1EFA2D3C2917AFD8E405833231775E2AA7345DC34AA3073C66665F3B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329748, "uuid": "d5117108-b9b4-4923-a6ad-d5a827827fb4", "value": "6144:6derbsQ6WW5nUuryzcDDyK/VPNhCoFeXktWWpur5tLJaIyuqngP/:keHzNWFtrySyUNhVsklY5toIyuqm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775329748, "uuid": "d7c4abe0-1d7b-483c-b50a-ebf7c8009bd8", "value": 250505, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329748, "uuid": "3217c0e1-e595-4e83-8fd2-8830c19a4de9", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1e46bf7-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775329748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329748, "uuid": "a9b44b81-d39f-4ab7-a118-7b526d929080", "comment": "Malware payload", "value": "dae80bd043b4a7cac8cf2ede5eb27c85", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329748, "uuid": "cf0cca51-635f-416b-a82c-0112d6e55ab1", "comment": "Malware payload", "value": "2596e230dd9075d1b5af526067774f97d078fbd1f34ab8be5cd11b556c6b8c3a", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329748, "uuid": "25a5f23e-92f5-4554-867e-2f34bf12cf09", "value": "T17D340122F480D726C9D4667AF7BA155C7312076CA3FE3201DC648A7437EB9278E375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329748, "uuid": "3594a387-aa98-41ff-acb2-3a7c554016a1", "value": "6144:mGMCt5Q+7ozo5yp58QUIkAMYr0zy8BKOW:PMueSIEycQZ9ozy8Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775329748, "uuid": "634979d9-9f69-409a-b0ed-d18761014566", "value": 251170, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329748, "uuid": "b0785076-b567-4063-bbeb-2855ca982e6d", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1f98715-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775329748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329748, "uuid": "1dd775de-64a0-4450-a1f2-1d96252504ad", "comment": "Malware payload", "value": "09423ac616ce71323ab19b0d5a5bd262", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329748, "uuid": "9808faf3-1ede-467d-862a-3f1baf042205", "comment": "Malware payload", "value": "bd4445aa5dd492a8c177bceff7a4ef8a9b333fb95a8d7bdf5e8fb3161259da98", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329748, "uuid": "0f20a197-56a0-4a2b-87cd-466e2334edcb", "value": "T1E74402D8F0918B72D9E0217FFB4F695D7713072DE2D933015E195A2937E3A6B0E226", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329748, "uuid": "9f684f68-58d4-49b2-bd05-0665a14d9de4", "value": "6144:2JHQbbQowPuo8moGcyht/OREaT5QbYo8/e/NxpJmi8j:CHSclPudixGRubYo8m/JU3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775329748, "uuid": "e1a8f268-8d77-448c-9767-c3879791d2ae", "value": 253653, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329748, "uuid": "e56718aa-5add-4af6-acae-67b7e18c4aa4", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c84de007-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775329759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329759, "uuid": "c5bdedea-7f30-4afc-8445-29e3fe6598d0", "comment": "Malware payload", "value": "b403e46d54dea0e65b1b8694a1ca65f2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329759, "uuid": "de22bc62-8a46-42fd-bd88-3c0dcfe9749d", "comment": "Malware payload", "value": "3d6f920992c6e41f82584fd558cf0415f255a9b50ef3628e2b0dafb8014ed0ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329759, "uuid": "7f939060-573d-430c-a63f-ceea8f6c83bb", "value": "T179641211EE401F9BCCAFDF755AAB03272B8C54DA83A1A32E537C8D2D789864049D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329759, "uuid": "e28636fa-69a1-4b20-99b9-5b7de7ac2780", "value": "6144:1gr6qZDnFJLIqJ/dGpU3UCKYQYqlZdadbMtwDtVx5SgW97msQfMAI:EdDLdJ/4pU3LQ8bMtwDvx5bG7msQfMAI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775329759, "uuid": "7aa192fc-efc5-48ed-92ed-a14748af1127", "value": 326002, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329759, "uuid": "85ac86dd-13c4-49e1-8398-57c2ca24b733", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8669b61-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775329759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329759, "uuid": "394609eb-e8a7-4be1-98c7-c63a1703b874", "comment": "Malware payload", "value": "35710589e5c527a1b54c9ba1150ecffe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329759, "uuid": "09391ee3-5416-457d-bd07-40cc810858b0", "comment": "Malware payload", "value": "a21b9fdbae3257e202e0f4aaa32ba65d23c14728683fc1a651eca42ddea9a9d7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329759, "uuid": "16c6a4f0-03b7-43a3-96cc-b8bfdb564362", "value": "T1443412839FC251B1E6938A344096D787EB24DD242004DBD5FB1E3EB1A8E23E7F50E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329759, "uuid": "80233a4e-a466-4067-965c-d419475f09c7", "value": "6144:0wM1m1qFlHH4APNSTfqEcaDKctbC+MeETu0pU:0wM1mgln4APNQiEcaDL9JMLVpU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775329759, "uuid": "7f1255c0-dcf2-41d8-96ae-f5c85ae91e38", "value": 248295, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329759, "uuid": "fb60e0f5-ef0c-4370-9749-4beb84d48212", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c86af821-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775329759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329759, "uuid": "4152d34f-ae2e-43b5-853a-f5b54792a9e1", "comment": "Malware payload", "value": "68dcf39cfbd689d99c471c140300f110", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329759, "uuid": "b1e54cbd-613d-4a33-a048-fe40f1c46a0e", "comment": "Malware payload", "value": "ad5aec8723a8ab586cc8442cb7ee4794feb633b15a96d0b1d8ae924aa3a94986", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329759, "uuid": "a0a49a0a-6416-4b27-9921-1c24625c18be", "value": "T19B341242FBC191B1E46703B40907DBEFCA34FA240150E5A6F395BA54B8F76C361AD7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329759, "uuid": "8b7abf24-bafd-4c56-a451-34ea9b1fc363", "value": "6144:0wM1mczgZ4GmRg87dvqqjpyuUjsoo8cFrPBESWGQAxyJUatxrNCxW:0wM1mcWgRg8Iqjpujsoo8qPBJAXPtxrr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775329759, "uuid": "87799818-8b52-4a70-97e9-2113b848b3f1", "value": 246860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329759, "uuid": "41ec5026-e58f-4894-a9aa-254dbfd32d75", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e78d3c3b-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1775329812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329812, "uuid": "ed8ceec2-118e-404c-91a0-7ce6f3bbba42", "comment": "Malware payload", "value": "71d34b6f0b0ec85692a33e9a7d3d0b9d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329812, "uuid": "6fad6895-dcfa-4943-9346-9484ab7569dd", "comment": "Malware payload", "value": "76dece1465d0598b533b29e3da7cc8531f48e1b15dc547896cda4650171d3d62", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329812, "uuid": "f459dff0-bfb9-492c-91c6-6b76f424a60d", "value": "T1C9341241F6C361A2E51303750652E7EFF2B9EB345090FB2FE3546E769EE0680918DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329812, "uuid": "25fa3462-e3cf-49e5-9e13-ce1efe88e71d", "value": "6144:bw0leKLh+EPq8OuTS0URjHF1qHO288X4tD6A6XUSw:bw0le6hniJQS0Wl1qu2lXV5USw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775329812, "uuid": "ed5cd2ab-30f3-4de5-8226-dbd5b2a3181f", "value": 247000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329812, "uuid": "d09e3d02-e23e-4d6a-af7c-806afe07d033", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9333b5d4-3071-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775339978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775339978, "uuid": "542a888c-0510-4ef6-b9fc-0371a5e165b4", "comment": "Malware payload (Mirai)", "value": "5ba5050e8be71038c1b30ebf3aeff727", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775339978, "uuid": "6c598e1b-e75d-4a66-bcd5-c03f5132dd50", "comment": "Malware payload (Mirai)", "value": "19c62e4d749a41b4eb0ac670c5fd9bedfd471ee5541064e52e2a1e9bc20e4a5a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775339978, "uuid": "962db389-b279-41d9-ad00-3d560bc1b965", "value": "T1BF611EBC41E0AED3C881B90CBB34D361634792FCEDB6B13C9D598A2684807157CA7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775339978, "uuid": "f6684260-455d-480a-b6cf-986e335e18d7", "value": "96:Vbp5rAkgYzhNnDRnd5xZDz/zVvljx93xjvlbSQ:x7X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775339978, "uuid": "b546371e-72ee-418a-a8e0-f01e51e32a53", "value": 3211, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775339978, "uuid": "ca9872c6-2c00-4c75-803f-803975731db3", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fbc0030-3076-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1775341985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775341985, "uuid": "c819ade1-50a0-4375-8d3f-dfd549d1c4b4", "comment": "Malware payload (Mirai)", "value": "c2b72339982da9362b5b9de0f12a30c8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775341985, "uuid": "d018f711-01b7-4387-9eba-620561679732", "comment": "Malware payload (Mirai)", "value": "73d6959881e86abde6fa3398f8377edc906892297e836d501b01e9e51e5e2131", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775341985, "uuid": "6d340762-dca4-48c3-a1e4-fd5cc0530f8a", "value": "T1BD732983FC81A603EAD01376BA1E519D33257399E2DE7203AE126F107ACAD5F0D7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775341985, "uuid": "0ae52441-7a95-403a-ae96-368dfb494cf7", "value": "1536:Jl9u2pf2dCjlHxHuhJV2hC2sAQQOjYRBepRZA6WZFxJ:Jl97pxMhL22ApOcRBeyF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775341985, "uuid": "254bf263-e9b8-425a-b5d2-a943b627c0db", "value": 75272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1775341985, "uuid": "a74296d7-a884-467d-aaeb-2f513dfbfdf0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775261056, "uuid": "d1ed65ec-2fb9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.129:47038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775261365, "uuid": "8a162d4d-2fba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.3.44.167:59151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775261710, "uuid": "57ffb307-2fbb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.71.194:34944/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775262321, "uuid": "c45cd650-2fbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.226.212.168:51430/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775262323, "uuid": "c5610fd7-2fbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.63.231.168:44606/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775262668, "uuid": "92e343e3-2fbd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.118.240.201:55074/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775262920, "uuid": "28e5da0f-2fbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.50.155:41497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775263089, "uuid": "8dee09ef-2fbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.39.28:35105/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775263219, "uuid": "db052e1a-2fbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.3.44.167:59151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775263327, "uuid": "1bf9246c-2fbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.44.125:38293/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775263631, "uuid": "d0d7bc14-2fbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.195.225:55643/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775264296, "uuid": "5d38c914-2fc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.226.212.168:51430/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775264420, "uuid": "a6fd2250-2fc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.50.155:41497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775264476, "uuid": "c8c9cfec-2fc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.39.28:35105/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775264649, "uuid": "2f888094-2fc2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.129:47038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775264649, "uuid": "2f889ecf-2fc2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.71.194:34944/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775264960, "uuid": "e8c6aabe-2fc2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.92.162:46969/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775266340, "uuid": "1fc071a1-2fc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.80.251:34901/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775266460, "uuid": "66e59dd1-2fc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.132.231.215:58266/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775266820, "uuid": "3dcce40d-2fc7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.244.54:50891/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775267528, "uuid": "e3960e44-2fc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.246.160:35476/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775267959, "uuid": "e4ab3312-2fc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.132.231.215:58266/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775268017, "uuid": "075b132c-2fca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.219.214:44261/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775268496, "uuid": "24e08952-2fcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.22.160:44314/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775268792, "uuid": "d52b6fb2-2fcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.175/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775268792, "uuid": "d53d61d4-2fcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.175/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775268795, "uuid": "d6c7b369-2fcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.175/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775268795, "uuid": "d6c85e28-2fcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.175/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775268797, "uuid": "d82352a2-2fcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.175/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775268798, "uuid": "d8f38dc7-2fcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.175/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775268848, "uuid": "f67f5ef0-2fcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.175/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775268848, "uuid": "f681f467-2fcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.175/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775268970, "uuid": "3f173143-2fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42:8080/apt0.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775269028, "uuid": "61858b3b-2fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.246.160:35476/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775269173, "uuid": "b806a8e2-2fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.127.6:38799/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775269219, "uuid": "d39e5541-2fcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.161.249.66:45857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775269940, "uuid": "81510d14-2fce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.0.118:47487/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775269988, "uuid": "9e360bab-2fce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.219.214:44261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775270179, "uuid": "0ff5f3da-2fcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.154.221:37931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775270179, "uuid": "101351fc-2fcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.226.210:56557/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775270770, "uuid": "6fdf17d5-2fd0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.95.40.217:38819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775271127, "uuid": "44cf2a96-2fd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.126.238:37286/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775271431, "uuid": "fa473bd9-2fd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.244.71.53/bins/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775271438, "uuid": "fe7cb9d9-2fd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.121.248:49639/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775271608, "uuid": "63d05ed1-2fd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.0.118:47487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775271851, "uuid": "f4974e02-2fd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.98.160:56004/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775271920, "uuid": "1d762b8f-2fd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.255.251.91:37771/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775271920, "uuid": "1d92af79-2fd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.177.53:55488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775271980, "uuid": "418a4ba9-2fd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.46.208:44574/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775272278, "uuid": "f30d0c3d-2fd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.118.146:38281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775272280, "uuid": "f3cd6c13-2fd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.57.50:49629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775272337, "uuid": "15c7a12f-2fd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.9.233:51813/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775272338, "uuid": "16609468-2fd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.244.29:55279/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775272517, "uuid": "81a12f68-2fd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.146.10:42613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775272521, "uuid": "8372dd11-2fd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.252.216.66:35218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775272700, "uuid": "ee285425-2fd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.129.55:54807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775272755, "uuid": "0f51a42b-2fd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.105.170:41391/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775272809, "uuid": "2f449230-2fd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.192.121.248:49639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273118, "uuid": "e7bf36a3-2fd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.57.50:49629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273227, "uuid": "288d86ce-2fd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.29.8:35181/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273232, "uuid": "2b75e107-2fd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.31.192:36642/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273358, "uuid": "76e67a9b-2fd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.46.208:44574/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273597, "uuid": "054b00f1-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.255.251.91:37771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273603, "uuid": "08d6057c-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.177.53:55488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273719, "uuid": "4e10cfcd-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.98.160:56004/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273783, "uuid": "74113002-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.244.71.53/bins/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273842, "uuid": "9713789b-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.252.216.66:35218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273962, "uuid": "ded8032e-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.244.71.53/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "defd5730-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.244.71.53/linnn", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "defd71b8-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.244.71.53/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "df01fc2e-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.244.71.53/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "df02e333-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.244.71.53/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "df0b2cb0-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.244.71.53/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775273963, "uuid": "df0de5dd-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.244.71.53/arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775274008, "uuid": "fa4658e5-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.244.71.53/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775274008, "uuid": "fa4bb5a9-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.244.71.53/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775274009, "uuid": "fa62a02f-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.244.71.53/arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775274009, "uuid": "faf15ce9-2fd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.244.29:55279/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775274081, "uuid": "255b24ac-2fd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.9.233:51813/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775274138, "uuid": "47505217-2fd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.209.84:36247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775274428, "uuid": "f4697392-2fd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.31.192:36642/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775274864, "uuid": "f851afd3-2fd9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.146.10:42613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775275177, "uuid": "b2bde067-2fda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.102.211:46215/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775275404, "uuid": "3a6fe5bb-2fdb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.83.43:53978/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775275881, "uuid": "568ebe6a-2fdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.76.78:52139/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775276120, "uuid": "e511d27b-2fdc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.102.211:46215/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775276361, "uuid": "74b7dbab-2fdd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.187.27.211:41823/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775276417, "uuid": "95c180ac-2fdd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.209.84:36247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775277376, "uuid": "d1bbd5a3-2fdf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.143.228:54558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775277567, "uuid": "432252c2-2fe0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.255.165:54237/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775277629, "uuid": "6899e517-2fe0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.214.98:41376/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775277857, "uuid": "f0874622-2fe0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://200.59.83.43:53978/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775279111, "uuid": "dbebc626-2fe3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.148.214.98:41376/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775279778, "uuid": "69558893-2fe5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.255.165:54237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775279829, "uuid": "877da6a3-2fe5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.5.163:47285/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775279829, "uuid": "877da734-2fe5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.163.38:50687/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775280012, "uuid": "f4c57f4c-2fe5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.217:35886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775280678, "uuid": "818c7d3e-2fe7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.108.75.66:41130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775281091, "uuid": "77f35e63-2fe8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.94.31.173:56330/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775281627, "uuid": "b74f799c-2fe9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.5.163:47285/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775281627, "uuid": "b75550ff-2fe9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.163.38:50687/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775281627, "uuid": "b75c2667-2fe9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.52.142.194:47317/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775281692, "uuid": "ddefb06c-2fe9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.144.215:47891/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775282526, "uuid": "cf39222d-2feb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.144.215:47891/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775282529, "uuid": "d13ecb4f-2feb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.108.75.66:41130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775282953, "uuid": "cde8e5d2-2fec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.84.165:35982/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775283126, "uuid": "34a6ff56-2fed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.98.77:42106/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775283436, "uuid": "ed9a624e-2fed-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.249/t.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775284027, "uuid": "4dc0be6b-2fef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.98.77:42106/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775284278, "uuid": "e37b9675-2fef-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.77.0:52576/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775284879, "uuid": "49b855de-2ff1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.22.160:44314/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775285227, "uuid": "195afdd5-2ff2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.107.34:59729/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775285904, "uuid": "ac695e0a-2ff3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.68.209:46209/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775286128, "uuid": "31f817b9-2ff4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.52.142.194:47317/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775286566, "uuid": "36eca1c4-2ff5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.84.165:35982/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775286674, "uuid": "777d63ee-2ff5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.198.32:55413/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775286731, "uuid": "99cee077-2ff5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xx.kak.is/_clkfx/lnk1.txt", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775286742, "uuid": "9ff2b8d6-2ff5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://preziosamagazines.cc/api/agent/download/69cce9bcd01476be56868ba0?type=exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775286914, "uuid": "06d147c2-2ff6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://preziosamagazines.cc/api/agent/download/69cce9bcd01476be56868ba0?type=vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775286919, "uuid": "099865c3-2ff6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1Rn-DtNEs_17qddGnq8xjdQjXu57JF7oV", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "SilentNet", "colour": "#c350bb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775287026, "uuid": "499b0784-2ff6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.107.34:59729/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775287579, "uuid": "932e5e79-2ff7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.68.209:46209/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775288120, "uuid": "d58a63ea-2ff8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.185.66:39667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775288365, "uuid": "675e893f-2ff9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.198.32:55413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775288844, "uuid": "852213a2-2ffa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.204.206:33689/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775289319, "uuid": "a02ed310-2ffb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.164.108:59338/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775291232, "uuid": "1448262e-3000-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.185.66:39667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775292078, "uuid": "0c935ddd-3002-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.165.62:57258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775292726, "uuid": "8eb5f4e7-3003-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.134.250:51748/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775293578, "uuid": "8abe0f8b-3005-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.154.221:37931/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775293625, "uuid": "a7002504-3005-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.134.250:51748/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775293957, "uuid": "6c5a583a-3006-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.177.204:35879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775294419, "uuid": "80017050-3007-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.227.28:40996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775294829, "uuid": "74560b6c-3008-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.166.191.8:57602/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775295130, "uuid": "27f8c1a9-3009-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.132.231:58769/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775295385, "uuid": "c0031d03-3009-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.107.127:43364/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775295439, "uuid": "e004dfcf-3009-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.177.204:35879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775295680, "uuid": "6f4a1d13-300a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.34.160:49543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775295924, "uuid": "00f27ad8-300b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.50.126:56668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775296327, "uuid": "f12a1a52-300b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.132.231:58769/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775296928, "uuid": "57b7b340-300d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.254.10.213:52129/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775297059, "uuid": "a5988349-300d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.237:47100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775297300, "uuid": "353c093f-300e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.34.160:49543/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775298081, "uuid": "06f0ded9-3010-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.148.113:46489/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775298327, "uuid": "99612e3f-3010-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.24.189.249:54382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775298501, "uuid": "0141d12f-3011-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.237:47100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775298919, "uuid": "fa137041-3011-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.165.59:41210/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775299268, "uuid": "ca05b2c5-3012-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.91.127:45200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775299876, "uuid": "34b0e45b-3014-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.148.113:46489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775300541, "uuid": "c0fe556d-3015-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.165.59:41210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775301067, "uuid": "fa7d8a3f-3016-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.91.127:45200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775301126, "uuid": "1d7c04aa-3017-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.92.106:54615/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775301198, "uuid": "48d5d17a-3017-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.89.9:46239/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302581, "uuid": "80bbb4c7-301a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.139.121:45948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302627, "uuid": "9c630805-301a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.9.27:49953/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302807, "uuid": "07d9eb57-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.109.187:45710/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302808, "uuid": "0821de0b-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.46.228.110:8963/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302810, "uuid": "092d18b5-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.219.1.198:47106/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302810, "uuid": "0994f1fd-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.171.205.73:55827/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302835, "uuid": "1817d3c2-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.247.41.139:46944/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302867, "uuid": "2b55f73e-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.247.41.139:46944/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302867, "uuid": "2b6608a0-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:59792/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302867, "uuid": "2b788ee9-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.109.187:45710/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302881, "uuid": "33a22315-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.159.7:59403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302927, "uuid": "4f02a130-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.89.157.150:42780/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302927, "uuid": "4f050325-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.89.157.150:42780/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302928, "uuid": "5001a400-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.41.89:49208/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302929, "uuid": "500e8fbc-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.175.206.228:43178/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302929, "uuid": "5026429b-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:35849/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302929, "uuid": "50264ced-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.232.137.101:35849/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302929, "uuid": "502ec511-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.171.205.73:55827/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302929, "uuid": "503220e9-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.225.203.24:40864/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302929, "uuid": "50826d82-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.200.135:33306/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302929, "uuid": "509969db-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.200.135:33306/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302929, "uuid": "509e04df-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.149.156:51309/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302931, "uuid": "51c03dd9-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.219.1.198:47106/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302941, "uuid": "5783af8e-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.42.42:46316/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302946, "uuid": "5a7c3eea-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.58.108.152:33480/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775302991, "uuid": "75414087-301b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.193.127:51230/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775303538, "uuid": "bb72617d-301c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.160.139.26:49173/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775303586, "uuid": "d7bba403-301c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/dlr.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775303587, "uuid": "d84d324d-301c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.215.170.152/hiddenbin/main_mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775303647, "uuid": "fc207597-301c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.100/bins.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775303657, "uuid": "02745152-301d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.159.7:59403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775304126, "uuid": "19cfca6a-301e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.9.27:49953/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775304188, "uuid": "3ef762bc-301e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.139.121:45948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775304309, "uuid": "86a548b1-301e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.229.141:36547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775304438, "uuid": "d37f2068-301e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.160.139.26:49173/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775304737, "uuid": "85de45ff-301f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.91.194:46154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775304792, "uuid": "a68df10e-301f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dcdivas.com/wp-includes/pomo/SecurityPatch.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "ZigClipper", "colour": "#72f06d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775305039, "uuid": "39d37df6-3020-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.91.29:33123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775305095, "uuid": "5b351cf6-3020-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.26.115.199:41937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775305329, "uuid": "e6eebad0-3020-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.76.78:52139/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775305876, "uuid": "2ced1b41-3022-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.91.29:33123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775305938, "uuid": "51d5436b-3022-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.229.141:36547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775306175, "uuid": "df5cbe45-3022-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.26.115.199:41937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775306298, "uuid": "2875d0b1-3023-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.222.44.125:38293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775306301, "uuid": "2a0f0009-3023-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.115.74.130:48378/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775306357, "uuid": "4b4fc658-3023-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.193.127:51230/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775306416, "uuid": "6e925dad-3023-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.91.194:46154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775307132, "uuid": "199f50c9-3025-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.15.88.209:50001/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775307727, "uuid": "7c4a7b7d-3026-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.249.254:57822/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775307734, "uuid": "801daf78-3026-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.47.122:58172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775307799, "uuid": "a6fc1fe9-3026-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.115.74.130:48378/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775307851, "uuid": "c6435ac6-3026-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.159.236:45670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775307982, "uuid": "13dcf39f-3027-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.77.0:52576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775308277, "uuid": "c401bfb0-3027-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:44384/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775308326, "uuid": "e14edaab-3027-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.233.86.23:27744/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775308816, "uuid": "0571dc21-3029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.15.88.209:50001/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775308925, "uuid": "463de645-3029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/atencio/random.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775309226, "uuid": "f9ebc450-3029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.233.86.23:27744/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775309227, "uuid": "fa5e7e7d-3029-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.249.254:57822/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775309478, "uuid": "8fa920e7-302a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.159.236:45670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775309537, "uuid": "b2bd1ca0-302a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.180.123:34189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775309649, "uuid": "f5fe0787-302a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.180.112:48828/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775310086, "uuid": "fa6ccdd7-302b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.23.109:34917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775310125, "uuid": "11619990-302c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8468794285/cv4B5nr.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775310678, "uuid": "5b218970-302d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.101.82:39383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775311028, "uuid": "2bdd973d-302e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.135.194:56369/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775311156, "uuid": "77d6c689-302e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.180.123:34189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775311217, "uuid": "9c756e9f-302e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://138.204.196.136:41623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775311271, "uuid": "bc4901e3-302e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.180.112:48828/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775311630, "uuid": "92731b7c-302f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.23.109:34917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775312231, "uuid": "f902dcee-3030-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.0.207:41918/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775312297, "uuid": "1fefa01a-3031-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.144.28:38855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313022, "uuid": "d001d0fe-3032-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://46.151.182.82/sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313073, "uuid": "eec7bead-3032-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://46.151.182.82/clean", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313073, "uuid": "eedb027a-3032-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://46.151.182.82/aarch64", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313073, "uuid": "eee0df67-3032-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://46.151.182.82/arm7", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313073, "uuid": "eee7dd79-3032-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://46.151.182.82/x86_64", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313074, "uuid": "eefd7343-3032-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://46.151.182.82/i686", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313126, "uuid": "0e6c471e-3033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.64.226:41730/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313127, "uuid": "0eda56ea-3033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.73.134:43447/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313427, "uuid": "c1b433d4-3033-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.144.28:38855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775313736, "uuid": "7a032dd0-3034-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.63.131:58936/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775314041, "uuid": "2fd04198-3035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.9.111.169:50759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775314151, "uuid": "714a1ea9-3035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.0.207:41918/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775314327, "uuid": "d9d382a8-3035-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.227:40456/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775314928, "uuid": "3ffd9c9c-3037-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.251.31:35122/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775315173, "uuid": "d24833d6-3037-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.9.111.169:50759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775315958, "uuid": "a63132a6-3039-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.251.31:35122/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775316321, "uuid": "7e6134ce-303a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.214.240.96:47132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775316548, "uuid": "05bdaa3f-303b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.56.130:48101/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775317460, "uuid": "259ed994-303d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.226.151.83:43372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775317757, "uuid": "d6a44a81-303d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.56.130:48101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318061, "uuid": "8bae0064-303e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.150.238:37784/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318289, "uuid": "1380a42e-303f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://secure-key.cryptolayer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318303, "uuid": "1c1e47ea-303f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.139.117:60383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318712, "uuid": "0faee6f5-3040-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hash-store.cryptolayer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318828, "uuid": "550e0185-3040-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.54.80:59153/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318902, "uuid": "81181f77-3040-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.150.238:37784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318953, "uuid": "9f472f5e-3040-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://anon-auth.cryptolayer.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775318960, "uuid": "a3bf545e-3040-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.81.104:57192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775319254, "uuid": "530a1568-3041-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bit-stream.logicstream.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775319493, "uuid": "e180052d-3041-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://code-gate.logicstream.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775319731, "uuid": "6f61f43e-3042-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.226.151.83:43372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775319848, "uuid": "b50f807b-3042-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://packet-flow.logicstream.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775320273, "uuid": "b2618e2c-3043-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rule-engine.logicstream.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775320281, "uuid": "b6d96731-3043-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.122.21:41131/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775320327, "uuid": "d29e29e4-3043-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.54.80:59153/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775320564, "uuid": "5fcc28ef-3044-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/encr/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775320567, "uuid": "618144b5-3044-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-frame.logicstream.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775320689, "uuid": "a9e05d07-3044-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.130.223:49049/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775320869, "uuid": "154bc845-3045-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://step-check.logicstream.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321179, "uuid": "ce632dd5-3045-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.122.21:41131/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321234, "uuid": "ef3acdb9-3045-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloth-net.technofabric.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321530, "uuid": "9f5fb475-3046-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://weave-sync.technofabric.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321654, "uuid": "e92c6ec4-3046-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.168.181.44:42131/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321837, "uuid": "566d526f-3047-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42:8080/get.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321841, "uuid": "58b447a3-3047-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42:8080/proxy.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321841, "uuid": "58c1a0ae-3047-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42:8080/get1.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321899, "uuid": "7b8a7157-3047-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42:8080/dob.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321955, "uuid": "9ceaff7c-3047-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fiber-route.technofabric.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775321970, "uuid": "a5e4df9f-3047-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.130.223:49049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322127, "uuid": "033acfb1-3048-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.170.117:38526/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322249, "uuid": "4bf887cf-3048-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mesh-cloud.technofabric.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322430, "uuid": "b80eeefe-3048-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brain-scan.neurogrid.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322490, "uuid": "db563fdd-3048-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.109.236.218:59787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322665, "uuid": "440d3b8c-3049-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/6728144278/8EgT7YC.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322726, "uuid": "6853becf-3049-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.234.196:57583/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322792, "uuid": "8f4d982f-3049-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.178.167:37866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322792, "uuid": "8fa4a656-3049-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nerve-center.neurogrid.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322855, "uuid": "b4e130cf-3049-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.31.189:38189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775322969, "uuid": "f92dbabc-3049-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.205.146:48259/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775323148, "uuid": "63ba6b18-304a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mind-node.neurogrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775323569, "uuid": "5ebd3ae2-304b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pulse-logic.neurogrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775323949, "uuid": "40eccd26-304c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.7.237:49888/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775324111, "uuid": "a18f9a2c-304c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thought-hub.neurogrid.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775324120, "uuid": "a71b3447-304c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.58.108.152:33480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775324232, "uuid": "e9a3975d-304c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.205.146:48259/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775324347, "uuid": "2e341681-304d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pixel-view.digiframe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775324354, "uuid": "32918a1f-304d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.31.189:38189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775324354, "uuid": "329dd6ee-304d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.178.167:37866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775324587, "uuid": "bd4ed79f-304d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://static-cdn.digiframe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775324948, "uuid": "94851423-304e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://web-portal.digiframe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775325310, "uuid": "6c2e8292-304f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://edge-cache.digiframe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775325426, "uuid": "b1a22800-304f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.98.187.186:51603/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775325547, "uuid": "f9870854-304f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://border-io.digiframe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775325726, "uuid": "6489ba79-3050-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.7.237:49888/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775325913, "uuid": "d3c8460a-3050-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://photo-sync.digiframe.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775326270, "uuid": "a8859fa1-3051-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://eco-cycle.recycleroach.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775326341, "uuid": "d31c4993-3051-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.80.221.155:57843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775326518, "uuid": "3cac605c-3052-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.244.222:44360/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775326569, "uuid": "5ab23874-3052-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://waste-log.recycleroach.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775326627, "uuid": "7d42b304-3052-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.253.241.253:15695/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775326931, "uuid": "32c2d499-3053-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-node.recycleroach.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775327295, "uuid": "0bcdc992-3054-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bin-monitor.recycleroach.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775327590, "uuid": "bb26f0d6-3054-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scrap-api.recycleroach.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775327767, "uuid": "24b3e7e7-3055-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://re-use-svc.recycleroach.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775327827, "uuid": "48a8cc89-3055-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.188.139:39201/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775327960, "uuid": "980b0061-3055-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.244.222:44360/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775328025, "uuid": "be76dc59-3055-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.194.92:33641/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775328130, "uuid": "fd1677ac-3055-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://study-flow.edunoppress.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775328487, "uuid": "d23b07f0-3056-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://learn-gate.edunoppress.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775328851, "uuid": "ab26bc8d-3057-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://class-sync.edunoppress.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775328979, "uuid": "f71246b5-3057-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.187.150:53084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329045, "uuid": "1eb1856d-3058-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.105.38:50784/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329147, "uuid": "5b62f32b-3058-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://edu-portal.edunoppress.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329226, "uuid": "8a6a7231-3058-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.141.99:46930/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329510, "uuid": "33f1c323-3059-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-book.edunoppress.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329699, "uuid": "a44af049-3059-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/zlr01030u5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329748, "uuid": "c1d86440-3059-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/547e510g2m", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329748, "uuid": "c1d86ef5-3059-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/5u6pbsspr6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329748, "uuid": "c1d89441-3059-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/rigdtn0fpm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329748, "uuid": "c1ea4310-3059-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/rt6l46cwdn", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329749, "uuid": "c2067c8a-3059-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/rduiqsxg66", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329759, "uuid": "c855f43f-3059-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/3vrtjbxplo", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329759, "uuid": "c86ce13d-3059-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/rh1ele5p8l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329759, "uuid": "c871206d-3059-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/3yahbbprg4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329812, "uuid": "e7c1c18b-3059-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/aygbsqq0c4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329866, "uuid": "084a9991-305a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://task-mgr.edunoppress.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775329929, "uuid": "2dc6be0c-305a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://o4v2vsml.momentumbloomera.digital/?=check&&actmn=egyQSrBZzZlAEzaB", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775330169, "uuid": "bc8069d8-305a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.157.4:42849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775330171, "uuid": "bda6693b-305a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blur-logic.confoundsoldout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775330531, "uuid": "946df9b9-305b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://maze-check.confoundsoldout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775330826, "uuid": "44295b76-305c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.234.196:57583/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775330889, "uuid": "69de561d-305c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://puzz-sync.confoundsoldout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775330958, "uuid": "92e76b24-305c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.116.207:36914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775330959, "uuid": "9359c4e5-305c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.23.7:42126/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775331130, "uuid": "f92392ac-305c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stock-out.confoundsoldout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775331444, "uuid": "b4a48aa4-305d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.193.247:33835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775331548, "uuid": "f2a12102-305d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deal-proxy.confoundsoldout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775331910, "uuid": "ca6f6253-305e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sales-api.confoundsoldout.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775332030, "uuid": "120370b2-305f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.116.207:36914/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775332091, "uuid": "35fee19b-305f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://skin-care.lookyouthful.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775332387, "uuid": "e6c958fb-305f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://face-lift.lookyouthful.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775332449, "uuid": "0b97d512-3060-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.23.7:42126/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775332520, "uuid": "3635a4a6-3060-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.10.210:37644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775332521, "uuid": "36bc44d1-3060-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.153.144.5:48034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775332686, "uuid": "98f9d059-3060-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://glow-node.lookyouthful.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775333050, "uuid": "719e43cf-3061-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-svc.lookyouthful.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775333113, "uuid": "971ce001-3061-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.28.216:52542/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775333120, "uuid": "9bd27e6d-3061-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.193.247:33835/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775333347, "uuid": "230ee14b-3062-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://age-logic.lookyouthful.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775333647, "uuid": "d57abef5-3062-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://prime-time.lookyouthful.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775333892, "uuid": "67928ff0-3063-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.153.144.5:48034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775334009, "uuid": "ad9d047f-3063-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bread-wine.eucharistshrink.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775334021, "uuid": "b45d1b62-3063-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.10.210:37644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775334144, "uuid": "fe1c6206-3063-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.135.194:56369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775334200, "uuid": "1f1b1037-3064-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.115.157:33536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775334368, "uuid": "835c058c-3064-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://holy-path.eucharistshrink.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775334727, "uuid": "59905565-3065-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rite-check.eucharistshrink.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775335149, "uuid": "55394177-3066-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://faith-gate.eucharistshrink.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775335273, "uuid": "9ea2e88e-3066-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.72.137:53872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775335453, "uuid": "0a2c1ddd-3067-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://altar-svc.eucharistshrink.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775335630, "uuid": "73b61f70-3067-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.115.157:33536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775335691, "uuid": "9820914e-3067-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shrink-io.eucharistshrink.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775335744, "uuid": "b7d39737-3067-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7782139129/1nzijzw.msi", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775336110, "uuid": "91b47e8f-3068-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spicy-api.caliphsaucy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775336358, "uuid": "25c239af-3069-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.82.68:40263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775336409, "uuid": "440bc121-3069-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-sauce.caliphsaucy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775336657, "uuid": "d80d41fe-3069-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.69.72.137:53872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775336660, "uuid": "d971b92c-3069-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.114.189:33257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775336768, "uuid": "19c0867f-306a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://palace-gate.caliphsaucy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775337066, "uuid": "cbbadc2b-306a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://royal-svc.caliphsaucy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775337492, "uuid": "c9774ead-306b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://chef-node.caliphsaucy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775337730, "uuid": "5726fcb2-306c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42:8080/proxyv2.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775337730, "uuid": "577731f3-306c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.146:45282/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775337791, "uuid": "7badac5c-306c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://taste-hub.caliphsaucy.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775337979, "uuid": "ebe498f2-306c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.99.69:36643/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775338032, "uuid": "0b3caf65-306d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tool-logic.hammermathemat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775338394, "uuid": "e2d4d82a-306d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nail-check.hammermathemat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775338815, "uuid": "de3c9ab8-306e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://calc-engine.hammermathemat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775338833, "uuid": "e8d18ac8-306e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.139.194:43045/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775338927, "uuid": "20bd6578-306f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.168.155:42340/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775339053, "uuid": "6b9f31ca-306f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://math-hub.hammermathemat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775339242, "uuid": "dc54c219-306f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.236.65.51:60916/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775339653, "uuid": "d1be018a-3070-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://forge-sync.hammermathemat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775339662, "uuid": "d6c3d895-3070-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.195.99.69:36643/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775339834, "uuid": "3d854931-3071-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hit-rate.hammermathemat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775339959, "uuid": "87cc658c-3071-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.17.80.138:46688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775340074, "uuid": "cc471fa9-3071-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://food-truck.balkarbelyashi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775340128, "uuid": "ecd939fd-3071-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.162.62:50466/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775340433, "uuid": "a24d075e-3072-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meat-store.balkarbelyashi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775340791, "uuid": "781cb83f-3073-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fry-logic.balkarbelyashi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775341034, "uuid": "08a1968b-3074-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dough-svc.balkarbelyashi.in.net/05fe317c-0981-4de2-bc8a-930d369db441/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775341629, "uuid": "6b0fa8f5-3075-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.215.97.216:45208/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775343428, "uuid": "9bb08d62-3079-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.29.184:41439/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775344161, "uuid": "50b73bb7-307b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.237.6.49:41787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775346135, "uuid": "e93a5b0d-307f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.237.6.49:41787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775346501, "uuid": "c31b2302-3080-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.78.241:53155/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775346501, "uuid": "c33c2dee-3080-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.47.122:58172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347030, "uuid": "fea1da98-3081-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.140.191/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347030, "uuid": "fea3e80c-3081-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.140.191/debug.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347030, "uuid": "fea74c6b-3081-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.140.191/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347030, "uuid": "fec967ed-3081-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.140.191/Ow.sh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347042, "uuid": "0594061a-3082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.140.191/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347086, "uuid": "20112839-3082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.140.191/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347088, "uuid": "2150d666-3082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.140.191/bin.sh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347088, "uuid": "216d5032-3082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.140.191/arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347089, "uuid": "2174f1f7-3082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.140.191/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347089, "uuid": "2174f77c-3082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.140.191/arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347089, "uuid": "21752082-3082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.140.191/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347089, "uuid": "217c491a-3082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.140.191/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347089, "uuid": "21830ad3-3082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.140.191/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347100, "uuid": "284a80ef-3082-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.245.140.191/arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775305085, "uuid": "55443234-3020-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.26.115.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775280664, "uuid": "796d731d-2fe7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.108.75.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775262307, "uuid": "bb971c59-2fbc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.63.231.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775266806, "uuid": "3546689e-2fc7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.244.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775274124, "uuid": "3ef13995-2fd8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.209.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775275864, "uuid": "4c900f23-2fdc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.76.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775276345, "uuid": "6b23ea20-2fdd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.187.27.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775302925, "uuid": "4dfa07cc-301b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.58.108.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775293925, "uuid": "59640b4c-3006-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.225.177.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775275144, "uuid": "9ef3c075-2fda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.102.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775323924, "uuid": "3283a39f-304c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.7.237", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775302805, "uuid": "0663cdbe-301b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.247.41.139", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329025, "uuid": "1273f4b2-3058-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.105.38", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775304725, "uuid": "7eb7b005-301f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.91.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775302805, "uuid": "0664283b-301b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.109.187", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775314025, "uuid": "25d6d668-3035-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.9.111.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775341626, "uuid": "6975e933-3075-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.215.97.216", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775340125, "uuid": "eb100848-3071-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.162.62", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322844, "uuid": "aeae9e26-3049-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.31.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775294407, "uuid": "78917421-3007-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.227.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775271125, "uuid": "43652bb3-2fd1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.126.238", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775330164, "uuid": "b9d7ae50-305a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.157.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775279824, "uuid": "84e0976f-2fe5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.163.38", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775302985, "uuid": "718f1ce0-301b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.193.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775330945, "uuid": "8b29fdcc-305c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.23.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775302925, "uuid": "4df7a0e8-301b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.149.156", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775302865, "uuid": "2a3c2091-301b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.159.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775312224, "uuid": "f4de7f9d-3030-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.0.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775298066, "uuid": "fd873f2d-300f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.148.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775328965, "uuid": "eef683db-3057-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.187.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775302925, "uuid": "4dfc7c81-301b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.42.42", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775298307, "uuid": "8d264f27-3010-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.24.189.249", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775271425, "uuid": "f6aebdc0-2fd1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.192.121.248", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775337966, "uuid": "e4211595-306c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.195.99.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775264944, "uuid": "df9fba57-2fc2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.92.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775273225, "uuid": "2759d25c-2fd6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.31.192", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775268005, "uuid": "003a32f3-2fca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.219.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318285, "uuid": "10ebacfa-303f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.139.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775277545, "uuid": "364e38d7-2fe0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.255.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775302566, "uuid": "77cc6923-301a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.28.139.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775328007, "uuid": "b3c57a0f-3055-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.28.194.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775317445, "uuid": "1cbba055-303d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.226.151.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775284264, "uuid": "db458985-2fef-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.77.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775271965, "uuid": "3815f100-2fd3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.46.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775295126, "uuid": "2547c143-3009-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.132.231", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775271907, "uuid": "160a8090-2fd3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.177.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775267525, "uuid": "e206c8e1-2fc8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.246.160", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775336645, "uuid": "d06d2703-3069-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.114.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318945, "uuid": "9a849f4b-3040-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.81.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775270764, "uuid": "6c58a4b3-2fd0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.95.40.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775303525, "uuid": "b37d9875-301c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.160.139.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775269206, "uuid": "cbb65f73-2fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.161.249.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775269924, "uuid": "781549a4-2fce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.0.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775307844, "uuid": "c22b8489-3026-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.159.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775338924, "uuid": "1f13cf46-306f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.168.155", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775272325, "uuid": "0f1c7ed3-2fd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.244.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775269145, "uuid": "a7766a3e-2fcc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.127.6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775344145, "uuid": "46e4a1a3-307b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "140.237.6.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775303584, "uuid": "d6f99017-301c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "162.215.170.152", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775296926, "uuid": "56337bc6-300d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "170.254.10.213", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775307124, "uuid": "14d276dd-3025-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.15.88.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286665, "uuid": "7210407c-2ff5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.198.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775277605, "uuid": "5a487a6e-2fe0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.148.214.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322785, "uuid": "8b5465b0-3049-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.178.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313125, "uuid": "0d64ae0c-3033-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.73.134", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775302805, "uuid": "0663f4d4-301b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.171.205.73", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775306285, "uuid": "206026f2-3023-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.115.74.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775272507, "uuid": "7b21cf03-2fd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.252.216.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775331425, "uuid": "a8ffd10d-305d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.193.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775262905, "uuid": "206a1aa2-2fbe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.50.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775262664, "uuid": "90c89055-2fbd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.118.240.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775272265, "uuid": "eaf16027-2fd3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.57.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775311025, "uuid": "29ae9a8d-302e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.135.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775263623, "uuid": "cc0fc06a-2fbf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.195.225", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775279824, "uuid": "84e022a1-2fe5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.5.163", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775302925, "uuid": "4df7acee-301b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.89.157.150", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775308325, "uuid": "e04c460d-3027-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.233.86.23", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775301185, "uuid": "40c2f2f9-3017-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.107.89.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775302805, "uuid": "0663f935-301b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "211.46.228.110", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347025, "uuid": "fbae2141-3081-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.245.140.191", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775302925, "uuid": "4df868e5-301b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.200.135", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775304306, "uuid": "84e84183-301e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.229.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775333106, "uuid": "933df5b6-3061-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.28.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775299265, "uuid": "c8817c8d-3012-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.91.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322724, "uuid": "66fdf3a1-3049-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.13.234.196", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775281625, "uuid": "b620983d-2fe9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.144.215", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775271844, "uuid": "effff6aa-2fd2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.98.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775320685, "uuid": "a7be57f2-3044-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.130.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775326505, "uuid": "34fb0daf-3052-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.244.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775332506, "uuid": "2d6d53c0-3060-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.153.144.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775309525, "uuid": "ab9d4d7c-302a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.180.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775282945, "uuid": "c8e40c72-2fec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.84.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775263325, "uuid": "1a64ebb8-2fbf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.222.44.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775295363, "uuid": "b2df5f35-3009-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.107.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775266445, "uuid": "5e01f3da-2fc6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.132.231.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775335264, "uuid": "999c7245-3066-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.69.72.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775261705, "uuid": "5532cb0e-2fbb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.71.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775285885, "uuid": "a1422eef-2ff3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.68.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775309645, "uuid": "f355bf6d-302a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.180.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318046, "uuid": "82919749-303e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.150.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775268784, "uuid": "d005fb65-2fcb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.153.34.175", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775294826, "uuid": "729d958e-3008-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.166.191.8", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775313006, "uuid": "c6e427b5-3032-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.151.182.82", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775339224, "uuid": "d1e3ec79-306f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.236.65.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775338807, "uuid": "d92cec90-306e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.139.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775272685, "uuid": "e5bc2537-2fd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.129.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329208, "uuid": "7fac6038-3058-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.141.99", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775336344, "uuid": "1d6c9fa6-3069-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.82.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775280007, "uuid": "f1b2fa56-2fe5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.143.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775339945, "uuid": "7f99d06d-3071-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.17.80.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775307725, "uuid": "7adc2be3-3026-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.249.254", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775261344, "uuid": "7d84290a-2fba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.3.44.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775334185, "uuid": "168b790e-3064-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.115.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775312285, "uuid": "18d0f90c-3031-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.144.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775271425, "uuid": "f6afb966-2fd1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.244.71.53", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775326624, "uuid": "7baa1f70-3052-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.253.241.253", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775333344, "uuid": "20ef6801-3062-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "age-logic.lookyouthful.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775335446, "uuid": "063fc0d1-3067-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "altar-svc.eucharistshrink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318950, "uuid": "9dc6a061-3040-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "anon-auth.cryptolayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775327290, "uuid": "0898f342-3054-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bin-monitor.recycleroach.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775319246, "uuid": "4e26fbde-3041-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bit-stream.logicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775330167, "uuid": "bb25f730-305a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blur-logic.confoundsoldout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775325545, "uuid": "f8553ce4-304f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "border-io.digiframe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322428, "uuid": "b6b5e93e-3048-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brain-scan.neurogrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775334007, "uuid": "ac4ddc73-3063-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bread-wine.eucharistshrink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775338812, "uuid": "dc7003d1-306e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "calc-engine.hammermathemat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775337485, "uuid": "c549483b-306b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "chef-node.caliphsaucy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775328847, "uuid": "a85e4e5c-3057-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "class-sync.edunoppress.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321231, "uuid": "ed463582-3045-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloth-net.technofabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775319491, "uuid": "dff675f0-3041-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "code-gate.logicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775304790, "uuid": "a5c40693-301f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dcdivas.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775331544, "uuid": "f060b5f0-305d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deal-proxy.confoundsoldout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775341030, "uuid": "06883f69-3074-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dough-svc.balkarbelyashi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775326264, "uuid": "a551d104-3051-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "eco-cycle.recycleroach.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775325305, "uuid": "69be132c-304f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "edge-cache.digiframe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329144, "uuid": "59b0972d-3058-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "edu-portal.edunoppress.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775332385, "uuid": "e5a096dc-305f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "face-lift.lookyouthful.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775335147, "uuid": "53d092d8-3066-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "faith-gate.eucharistshrink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321950, "uuid": "99a490c2-3047-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fiber-route.technofabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775340071, "uuid": "ca646b76-3071-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "food-truck.balkarbelyashi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775339650, "uuid": "cffed547-3070-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "forge-sync.hammermathemat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775333044, "uuid": "6e62c6ee-3061-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-svc.lookyouthful.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775340789, "uuid": "76b44588-3073-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fry-logic.balkarbelyashi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775332684, "uuid": "979687e3-3060-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "glow-node.lookyouthful.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775326925, "uuid": "2f365a0f-3053-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-node.recycleroach.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318709, "uuid": "0dec4f96-3040-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hash-store.cryptolayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775339831, "uuid": "3b83819e-3071-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hit-rate.hammermathemat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775334364, "uuid": "814b5fb4-3064-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "holy-path.eucharistshrink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775336407, "uuid": "42c8676d-3069-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-sauce.caliphsaucy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775328485, "uuid": "d11c667c-3056-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "learn-gate.edunoppress.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286914, "uuid": "06686bdf-2ff6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "loadspot.amd64fox1.workers.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775320564, "uuid": "5fb577f7-3044-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-frame.logicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775339051, "uuid": "6a8e7851-306f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "math-hub.hammermathemat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775330524, "uuid": "906c9793-305b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "maze-check.confoundsoldout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775340426, "uuid": "9dfc1186-3072-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meat-store.balkarbelyashi.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322247, "uuid": "4ae1bdeb-3048-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mesh-cloud.technofabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775323145, "uuid": "6203884c-304a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mind-node.neurogrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775338386, "uuid": "de2fdb44-306d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nail-check.hammermathemat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775322787, "uuid": "8ca0d866-3049-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nerve-center.neurogrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329927, "uuid": "2c73f1be-305a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "o4v2vsml.momentumbloomera.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329506, "uuid": "31596092-3059-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-book.edunoppress.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775319846, "uuid": "b3ebbef2-3042-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "packet-flow.logicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775336765, "uuid": "182f7739-306a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "palace-gate.caliphsaucy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775325908, "uuid": "d0db469d-3050-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "photo-sync.digiframe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775324345, "uuid": "2d28e6c3-304d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pixel-view.digiframe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286730, "uuid": "98c61959-2ff5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "preziosamagazines.cc" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775333645, "uuid": "d45627c4-3062-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "prime-time.lookyouthful.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775323567, "uuid": "5db019a2-304b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pulse-logic.neurogrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775330825, "uuid": "437d7398-305c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "puzz-sync.confoundsoldout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775327764, "uuid": "234be15c-3055-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "re-use-svc.recycleroach.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775334724, "uuid": "57de7a7d-3065-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rite-check.eucharistshrink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775337064, "uuid": "ca865918-306a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "royal-svc.caliphsaucy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775320265, "uuid": "ad9ae346-3043-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rule-engine.logicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775331906, "uuid": "c7d5f984-305e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sales-api.confoundsoldout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775327584, "uuid": "b81edd23-3054-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scrap-api.recycleroach.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775318285, "uuid": "10fd7e34-303f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "secure-key.cryptolayer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775335689, "uuid": "96d3e965-3067-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shrink-io.eucharistshrink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775332088, "uuid": "342f3ed1-305f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "skin-care.lookyouthful.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775336108, "uuid": "9052a9ce-3068-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "spicy-api.caliphsaucy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775324585, "uuid": "bc0e0dd5-304d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "static-cdn.digiframe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775320867, "uuid": "1405f67f-3045-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "step-check.logicstream.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775331125, "uuid": "f670e632-305c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stock-out.confoundsoldout.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775328128, "uuid": "fc10fc92-3055-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "study-flow.edunoppress.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775329864, "uuid": "0719756a-305a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "task-mgr.edunoppress.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775337788, "uuid": "79ce4682-306c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "taste-hub.caliphsaucy.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775324107, "uuid": "9f69ff91-304c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thought-hub.neurogrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775338026, "uuid": "08003510-306d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tool-logic.hammermathemat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775326565, "uuid": "583a3973-3052-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "waste-log.recycleroach.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775321525, "uuid": "9c6ca2c4-3046-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "weave-sync.technofabric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775324945, "uuid": "9317c1ed-304e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "web-portal.digiframe.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286730, "uuid": "99163938-2ff5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.ubvbksdf-oss.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286730, "uuid": "98c40e21-2ff5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xx.kak.is" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775286730, "uuid": "98c3a7f2-2ff5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "youdownload.oss-cn-hongkong.aliyuncs.com" } ] } }