{ "Event": { "published": true, "date": "2026-08-21", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-08-21", "timestamp": 1787357726, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "2eb9934a-eaa4-4ec0-bec9-510219ee6ac9", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1787270839, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787270839, "uuid": "88b81963-ee5f-4fe7-8fd5-c90c8caf0877", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787270839, "uuid": "2a38b02d-ec8f-4db6-b8dc-1edbd30cfb2d", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787270839, "uuid": "90cb0585-3aa6-434d-9bea-67d7feed3658", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787270839, "uuid": "40d5b716-6f3d-4b2f-aadd-e965a57d242a", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787270839, "uuid": "4ccc2126-68b1-4217-858c-23d2afdc8fb9", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1787270900, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787270900, "uuid": "85e736d7-a2c7-458e-ac77-0f7d0b2afbe9", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787270900, "uuid": "3aaaa860-a434-40fd-a336-768ae7e4ab95", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787270900, "uuid": "8121bcbd-911c-4dbc-8ec6-399c7dcfe4bb", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787270900, "uuid": "a3256165-09dc-464a-9078-91f948615eb1", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787270900, "uuid": "b6f048c0-7cd7-4836-b6ab-86330c9b2d89", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c88fcec-9cf5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787271198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271198, "uuid": "83f97102-249f-436f-8697-a7529429509a", "comment": "Malware payload", "value": "614ce22ae7a94d72633c2168b3e723ba", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271198, "uuid": "d002bf8e-2ee5-4a1e-856d-5a60f3ac6df0", "comment": "Malware payload", "value": "1647c36ad4a2f94705eebbd4aff38a6541b9051abf35deb8a8947845b23e2c58", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271198, "uuid": "ed002798-1119-4bd6-bc7e-da0bfb3a89e7", "value": "T1CD72A583A5919913CAC08BB85B7F9B8D3663D225E28BB70F850D93902C5F14D4F5FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271198, "uuid": "44c9a385-5fc5-4daf-8dc7-8b58dafca3f4", "value": "192:gpAhrTBtmNlHDJ+82Wd3Vg6n7a6enSgkhZTDZwjP4kTgc1SAlNe4UTuwEIpu:JMNlDAB6FZ7a6nhzwkk1QKejHf4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787271198, "uuid": "8c001d6f-ff55-4250-bb6c-41d8cc085931", "value": 16214, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271198, "uuid": "a3abc78d-d877-4c56-98ac-e27718b056c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ab7ddc1-9cf5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787271383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "e4356675-2674-43b4-b918-dee465e26e54", "comment": "Malware payload", "value": "a3c2b965608f75116e7e58a81f564f3e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "a93e4c8f-40d8-42ec-815d-6ecadff8e66a", "comment": "Malware payload", "value": "30db2a6a5946a66c05d900cc7091f466cb9783b56b031fcbaf5f634a7ae435b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "5eef833e-b75b-4293-ab2c-74208d50d28c", "value": "T12342C641AE23CAB5DDE412358C97573C0DC084027A37FF4BD238D9BDA839946969AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "b87e1925-a2ab-4572-9a3b-e286833978cb", "value": "192:fgFtdyfTa30Vhk7huDAz4wYRmZj4UDmoJ5BHokxIEY55t3e/C8Qm:fSyG0Vhk1uDA+kDmeHLx055tT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787271383, "uuid": "d5689aba-b3e6-4c7f-a5a7-f4cd2db020e2", "value": 12056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "56e4065d-35f9-443c-82ee-f3ec6b57966d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8abd99a3-9cf5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787271383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "c205b55d-3a00-44c9-9368-876874741e43", "comment": "Malware payload", "value": "b7854fc75b1ae0a8f4a4731c0b5dfd2b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "3b1adafd-bcb4-4340-814d-2dd192d51cc5", "comment": "Malware payload", "value": "3b382773c6d6af85d284d0bf38064d761461879bde13269026d8dc88e4977063", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "1e5826a6-4e9f-4e57-ac87-37b03d10ddac", "value": "T1FD52B8039B12CA75CAA011B988474F301D51CC03AE5AEF1BF668F9F9756128DA11EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "700dc162-0417-4df0-a2c9-b23bec6846b4", "value": "192:fgLGMxbTgY9UMWu5X+ERXmJDRjyaXL0BtebQ6vIsxId0mfO9LU2vhUv/L++rC:fAfUMWu5uumJdum06vzhmKL9vhU7Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787271383, "uuid": "e97fa57c-9a02-4797-baef-6d2b7367f174", "value": 13604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "17d76cc8-d2cd-438d-9c02-fe003161440a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8acb1e9e-9cf5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787271383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "b7dff8cd-6fca-45ea-b7a5-46844c10c282", "comment": "Malware payload", "value": "35cc3076c6ee744f16b5738afc7bb3e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "4cd76b93-3acc-43a3-9e89-1c33328338bd", "comment": "Malware payload", "value": "f7c770b11a493248931a66044ffd4e7e43204e15d3ab29b0f08cd6f74606c6bf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "af3d4a82-9a65-45c6-a33a-7160655b9481", "value": "T1AD22C70F1E10292EE8D4117CAA1BC78594C99E61C246630F73E99BD69CB725C7F7B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "a94c20b8-ad6e-42a6-a013-a0e16b7898f9", "value": "192:VKTVu/E0nJpvaFVADvdRd3JGk07p2kSl7Io:V7E0nHaeB3JN0ilP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787271383, "uuid": "8c4b5384-642c-4d7e-adfd-0429923c503f", "value": 10800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "109a825b-80e7-4df3-9f74-63f4db7ac326", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ad3d184-9cf5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787271383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "4198dfd1-461c-4896-ada5-ecad932a8bae", "comment": "Malware payload", "value": "f4235a3b77678f7293ffd44a6c92b3a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "b56e5809-e07b-4152-893e-1ebeeb6490b2", "comment": "Malware payload", "value": "df39ed227704f9d6661ab1c4c598d1cfed90472c6a8e3c75de58b01750382b48", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "b0786de1-0369-472c-a7c7-205cad4cf4a9", "value": "T17C42D642BCB1B747CAC007764F3BE78C3BD2E135C7D5F78A056A566D2E2E0162E0A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "8c6e29c2-d0b0-4429-88c0-b170276c2d1e", "value": "192:3/+K63u+uEJR/QXDMb9qT5xxDEFKN5i2laGr6iDHVElJyjvUu/:3Me+uEJFsKekiY7GrzHVEOz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787271383, "uuid": "27b17b91-eeee-4b79-8f34-ddcc740af6f7", "value": 13028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "81ed475b-b47a-45e4-990a-0732e5a72f84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ad4ed02-9cf5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787271383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "67962ae3-79a8-4918-9e1b-4b5befafc320", "comment": "Malware payload", "value": "c30a4291939f136784c89154a6240b49", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "469e2c81-2d2c-462e-a641-810a4f6caec8", "comment": "Malware payload", "value": "7681a07ca6e157f8066d8eef5d53afaaedf965aecc43bfade7af4edc5bbe21fd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "1ad26690-069d-4d02-9187-6cca18633d12", "value": "T1B752B436AF40417CCC8444F88C8B577194E2A4C3EB69EB87C358FAA8791574D5A1E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "fae38469-d835-441c-ba70-4caeb7f09305", "value": "192:G27TGDPCrXJAviauTV0wsaUwqEVgW3s87zX7gaVL:kDPCrXeviV0wsaUlop7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787271383, "uuid": "77bc7999-8748-4279-8f29-aae8a4840ee9", "value": 13360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "aa263f8c-83f9-4a78-82a9-efb1a860bba3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8adc0324-9cf5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787271383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "1f579b8a-1f6e-40ad-9fd5-6307bb4ba42d", "comment": "Malware payload", "value": "debc40a39f6a9b0b95f4b310859426cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "a9bede5e-8c7b-4e1d-b9e6-6db38adddcd9", "comment": "Malware payload", "value": "1385c0859e91a4a8492fbc4de56d0c7ea8dbdea77c8c776aaa1ec705dfa96b90", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "179a7f05-41a6-4abc-a843-f0cb7675ef70", "value": "T18332D60306B6D917C8C0133190B74772B9E6AF555BAADB6FFC2D480A5CA63902E3F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "a8c9b7c0-ec9d-49b9-856a-d0947fc8162c", "value": "96:90o1MgTc1Pdl9ozwbKMigtrF1PTr+W803gU0ReZNYuOf5Zw3jkrBU1vnrMW9livD:2TgOy4igZ3q0P5OhmzkOTMWzenD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787271383, "uuid": "ae45112f-adc1-4000-9bec-3fdbdb699ab7", "value": 11176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "db2b8564-0fb9-4e4d-b8ea-992164bc67d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ae3905d-9cf5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787271383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "952827ca-1c4b-4f1a-b65f-a524fb51acc4", "comment": "Malware payload", "value": "689a8e6559b541be5d6317f875681e5a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "ed2c7d0a-b37b-4233-b2b5-ccf24540b219", "comment": "Malware payload", "value": "ee364d83f7c7ae6934283025b999c9b11e83fef527217b879fbf54bbe998b692", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "c02c9aa1-74bf-448c-847b-e32484013ad7", "value": "T19432F929BB1E0142CD813EB0C75B33D147DA75C062646F8BE1594225EBB2A1A5E3B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "14b53429-d637-49ca-aaf2-9e55e94c194f", "value": "192:W3Z0QbTrHyJf34O5oZyhaCC7xMmPuWP1hE8SjsQf39ltBLuiDJ0+Lqf:WN+JfoO5oZyg7YM+G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787271383, "uuid": "c4c55a4c-70b1-486f-9856-916d7c272c90", "value": 11744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "9d227947-2213-4fce-9312-f29bdba4c96a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8aedb2c9-9cf5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787271383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "743ad3be-1f70-40dc-9f71-729f2df73b6d", "comment": "Malware payload", "value": "9646accdea9896a74e3cbb5f608c353e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "5ea36de0-65b3-4c0c-aa77-635a420a9db8", "comment": "Malware payload", "value": "c150ee2cfafe6d907ca5b325cf0282a7516a172c6326d730bd4ee8faa716e000", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "61e91b93-3fd9-4973-9d1f-e16365b57f9d", "value": "T1FF728547AF200D7BED07CEB78A9B171640CE9537E1D5BF27A528E940B6091AB0CE7C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "fd74747d-45c3-429b-9199-c0fc24c5135a", "value": "384:iUTX10FAq//YSGR4s2xtFwu/CmgmPtv1EBEU:iUj10FA6/wRUtVCmgmPe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787271383, "uuid": "f10af44e-1959-45ef-bff7-f84e58a7aa4c", "value": 16652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "3057fff5-f6ec-48b5-8ca0-32f01ff6ecf4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8aef1bc0-9cf5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787271383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "4f3386e1-4228-4493-95ee-4154f44ce3bf", "comment": "Malware payload", "value": "1e144da1c70f09ac91a7ff7985b4b8b6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "5bf69272-594b-44c5-8944-d85860529522", "comment": "Malware payload", "value": "662a233dbc7d95cc6612526d0f9e43390a95eb4870cd50242b2e64ba2a589202", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "76101056-a531-485a-a5c1-278e4aab0762", "value": "T1AC4208D07826CAFAC945C2344D4F7B3D09E0C409BB35AF9BEB28FE9DEA1F54911492", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "6eaa0262-ddde-4c1e-9ec4-afba24a18b04", "value": "192:f2d/Zj5uNTChzMAG8YWnkTwztvvrmP596v0gXD4x5nltI+UCqrdWQ:fO5uuMZ8pi8ns2XDmI+UCqV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787271383, "uuid": "bc99edd1-5343-44ac-b427-531524dd33cf", "value": 12416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "507f46f3-7334-42c3-b044-e9fe638605f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8af69ebd-9cf5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787271383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "ad4dc2d0-0c20-442d-91dd-ee12f54e2891", "comment": "Malware payload", "value": "16950ec1d69ca43e45822ecfa7a2d8bf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "22946671-12f1-4e34-87b6-2ec62a149bd4", "comment": "Malware payload", "value": "ce890f43a6545fb0dbd39193364960bb5107b069e8d7fa6e1e31a238ec631d32", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "bd37bb82-5560-4855-8e28-8cb7399ee4ac", "value": "T19942B7C3E4919A12DAC08BB85F3E9BCD3567D234F69BBB4FC4099350186F1494E1E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "51a31a23-1678-4806-af17-9c0888a77714", "value": "192:RNMjnaBtmNlHDJ+82Wd3Vg6n7a6enSgkhZTDZwjP4kTgc1SAlI:7MNlDAB6FZ7a6nhzwkk1Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787271383, "uuid": "0afa38ef-d978-46f9-9a62-9e4e59a2f119", "value": 12540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "17c33dbb-bbae-48a9-85d5-8eeaf38addd3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8af8219e-9cf5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787271383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "123ee745-8c1c-4c17-b7dc-83d72cbf7516", "comment": "Malware payload", "value": "5e71f7d5feacdce29d63d37463542eb2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "b4f11151-e708-4c51-a898-c158ed2a1dbc", "comment": "Malware payload", "value": "1d1b10444e55e9b7a0b0aa8ce7bcc3d82e818246b096a954c49ea7750e478dd5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "1098e999-fe01-4d67-bacf-7cf9802939c6", "value": "T18A6272496A748FFEF6A6C7B8C767CF70829421A243D2C6DED22CF0020C54719AC1E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "45efb88a-548a-47c1-9089-5cc2111a72c8", "value": "192:NenRPhNtYTWE0IJUA7VXHi8l/25E+jqDmZw3Ll6Yt:YRpYWqUA53i8S7ZwoYt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787271383, "uuid": "6d09a088-fca1-48a2-8e86-a53848a4bb96", "value": 15436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "efd35197-eb50-43ad-a8f5-243f2881a5b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8afc6bfb-9cf5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787271383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "35c2cfce-aaad-4af3-a424-54f47ab5203b", "comment": "Malware payload", "value": "5c76f5598ffc445f0d425d2cdd0cb701", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "1b3cd660-537e-4ee0-9fdd-dafb38f978eb", "comment": "Malware payload", "value": "b246f4efb094d21540a24731186b88e997f88c775416a2ce96b4c54c7ee9d940", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "27401b12-1bc3-4ab1-bf67-dd1d7a505206", "value": "T19D42D642BCB1B747CAC007764F3BE78C3B92E136C7D5F78A056A566D2E2E0162E0A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "808e94dc-2744-4e2c-98eb-a699a4b7ce04", "value": "192:1/+K63u+uEJR/QXMeMb9qT5xxDEFKN5i2laGr6iDHVElJyjvUu/:1Me+uEJFZeKekiY7GrzHVEOz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787271383, "uuid": "c1133239-f56c-4071-a4f7-d6dbbcb65c7b", "value": 13028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "959118b5-b77f-43ee-9571-83e0985cc051", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8afddcc8-9cf5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787271383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "53a68d39-3fcf-4ed3-bf20-c54a964a25e4", "comment": "Malware payload", "value": "094f0c12b69e2782b6a0d54e22d67f58", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "f06413c4-81be-406a-85f5-110fad82e937", "comment": "Malware payload", "value": "25f6183c81502416d8a5a49457026e69e5e6c31d20d6b3052a1ef56c0c040285", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "efe393a7-9fb3-4358-ad5f-94b0ba668669", "value": "T1D572F861EE89C2B8D0AC197C1017AB38AB82950A4689F787C83F9C223F1535F6DF53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "9c76d167-1c24-4cd7-b6eb-0497b6e8aaf9", "value": "192:H+ZoDFRTobGj8cuoBTGccayw7GrzU+xNAE2iTE:scFebq8cuQbynr7xNhL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787271383, "uuid": "3ebc9a7a-5d66-4f37-82fe-8fec8e63aa66", "value": 17224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271383, "uuid": "517793b7-9102-4468-a78a-e408c70468ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "284c10c8-9cde-11f1-8686-82aee05be84a", "comment": "Malware payload (RemusStealer)", "timestamp": 1787273142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787273142, "uuid": "31d037b6-c12b-40a4-b9ae-dd654584ee41", "comment": "Malware payload (RemusStealer)", "value": "6c66a5720f35976345d324baf56fcd83", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemusStealer", "colour": "#ddd7e0", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787273142, "uuid": "af5faf9f-3547-4b1e-9a91-00ac9213984b", "comment": "Malware payload (RemusStealer)", "value": "e313c09240d94d6f8aed6e6f4c802f1dce4e204cb7020e72d5344a8cd93b3b26", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemusStealer", "colour": "#ddd7e0", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787273142, "uuid": "ee84b30c-d90e-445a-88bc-59e261bfdc39", "value": "T12C54BF45F7A660ECE1B78974C9154662FB7B3A560340AF6F0361CB72BF136A0BD18B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787273142, "uuid": "9204ace1-ead4-4cd8-8dd3-ae45055fe579", "value": "905d6e2fd95bb9d68bb959ec7e8cfb12", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787273142, "uuid": "47760189-f437-4dec-b7fd-de22590f35de", "value": "6144:R0rVrlm1wui0DNiJC7PAQW04qeZMa0H7ip4MQSe:IVrlm1w70h57bW02Ma0bip4Ye", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787273142, "uuid": "a5cab2ca-a918-41d4-bdee-3b5d99d40e92", "value": 293216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787273142, "uuid": "7efa42b0-38a7-4253-8fe2-2a020f728c93", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67c87113-9cfc-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787274331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787274331, "uuid": "e96a689a-0b45-41b4-9189-56e8aeb62abf", "comment": "Malware payload (Mirai)", "value": "89e8a1743881a86008045d0219d47b62", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787274331, "uuid": "c7fc17d4-5602-4391-a001-2bffd3005381", "comment": "Malware payload (Mirai)", "value": "528778d697d92e7c239b16aa532806cc3bd70960bea7ee46156a497a5732ff12", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787274331, "uuid": "a77adfe7-51c6-4b92-8ec2-4c20fc8de87d", "value": "T1D8633A02B30C0D47F5A72EF0363F2FD293DFEA8012A5E685751EEB459172A325586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787274331, "uuid": "53891d79-012d-4ef9-8f4b-965e7d25f37c", "value": "1536:nqm/mQ1ZKW4uCrG3pDuWgjPsuEbaoujCuxnnVbT/:qm/mcIWNCraVlJuEbLulh/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787274331, "uuid": "5ed14ec0-108c-4b74-acf4-ae7dcedf1824", "value": 71576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787274331, "uuid": "a4320820-09d8-4650-be96-975b30e8ee56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ddfbcc3-9cff-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787275522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787275522, "uuid": "5587db34-f719-4d16-bda2-dd06ba731353", "comment": "Malware payload", "value": "ab69b1c3fe5043e722f29eb1187cdda7", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787275522, "uuid": "0bc6ea92-c661-46ce-915f-981d7f70483a", "comment": "Malware payload", "value": "57ddb41f77ab8ac66ad2a8a017e7fa768e04052e68783c5683736742152a9271", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787275522, "uuid": "a0c82570-2ea9-4fbd-a205-466a6efc94bb", "value": "T1226162FE36A8A9920CC49D2C6A7FDC9A6471C1C82350CE66D79F7475ECACD20F065B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787275522, "uuid": "f7ed650e-5fae-46c8-a7a7-81e6c7bc57c0", "value": "48:o/1fveE8Zu46U+jMH9u5DcxHY1+IWdqFI+AS:o/1fGbZu46UyMdu5Dcq1YIIc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787275522, "uuid": "e43abf60-d9bd-4d41-867d-78fc19e6212c", "value": 3319, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787275522, "uuid": "0e0b6ee7-953f-4631-9b8a-00395a91837a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4dc6b3a-9d03-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787277547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787277547, "uuid": "ecd1257e-6e6a-44df-8d74-8195a9bc33f5", "comment": "Malware payload", "value": "d296208d02064f8d0af200b14fe814bc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787277547, "uuid": "7aa42d69-0089-4202-8c24-3db2addb9c57", "comment": "Malware payload", "value": "394472cf279cdc0bc530f0af83eba7e6abfbac0b040b53afc1ef438cbd81477d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787277547, "uuid": "0f1cdc56-9a02-4dc5-adf2-8e224390cb3b", "value": "T1ABB186234829AC721157CAA4B146762DC0EA8277F342C65A72FD815C9BD3DC381E37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787277547, "uuid": "b5ec95e0-7873-4221-90a6-5c6e22f73260", "value": "96:MJlH7n472wO36VvLb9NE0kNUmgHwrSUx9PGLq/GNt7sGrExml51pOT1pV8Q3O3NZ:MvH7n472wa6VvLb79GUm3H9PrGNt7s+1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787277547, "uuid": "2f2160ed-ffec-4fa2-8a9c-3ec356a0c8ef", "value": 5413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787277547, "uuid": "58bdebbb-f2f6-40f9-bf5d-06cd04f8d10f", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa794f58-9d04-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787277879, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787277879, "uuid": "0e5c35ba-0449-42ab-9320-1e65e0951e33", "comment": "Malware payload", "value": "f100676372a054266cdf5d494779f305", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787277879, "uuid": "3e2b3f72-24c3-4a0e-a92f-2ff18e7cebe4", "comment": "Malware payload", "value": "9b394421430cd2cb78c3422bd8a2c73ca498434c71626d4945609a40ed91acbb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787277879, "uuid": "efcd83a3-48d1-4c0c-acda-9da4ef7bb015", "value": "T15BF3E85EBBB23276721B8309FAC1B768916DC153EA011EE7BDB5F118CBC229201736", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787277879, "uuid": "3215ba19-b078-41b6-ac7d-6b5b50b94925", "value": "1536:5apArYlURr4k3bpnIPMAyCJ/Wg+jrF0o1iF4BkhYTynUX0vZI:Ym4k4F46YTytW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787277879, "uuid": "e7258870-3829-478d-b7c6-058a0ab19079", "value": 157603, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787277879, "uuid": "9fe88967-f90b-4414-8f31-0dc54789c1af", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dcfcb23-9d06-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787278636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787278636, "uuid": "f252967d-4dc4-4ce8-9c20-b0a3144316e3", "comment": "Malware payload", "value": "7c18cee9b02b1ab897ec92afa2957a83", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787278636, "uuid": "65a3aec6-c7e7-4ab9-860c-9bc81597daf2", "comment": "Malware payload", "value": "5d9c889968fc807efdca2889bd9721fec92c4552a2585f3f90b3a591adc086d5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787278636, "uuid": "8e5c15c5-1fb0-408e-9906-a8499c6dcf71", "value": "T1B7C1837AA804CD4BEC21BD49003EBE3B94CD883B46A5CD7C9ADCCE0906025BA2F91D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787278636, "uuid": "3dc5a26a-0dba-4ecf-a20d-275dc5cf5a83", "value": "96:ERyQMPOaYosLvnK0ggucL9tci2wBu7cg1xqzcfxmbcfEWtacTKEoouW:bQUORomnrn2CgnqzcJmQXmoD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787278636, "uuid": "dfdea029-241c-4477-9d45-5fa8fbe81e76", "value": 5898, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787278636, "uuid": "0d58b3cc-0375-4bd1-8a31-8e2b4ab80be1", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2446b8d-9d06-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787278751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787278751, "uuid": "381a0ebd-e3ae-435e-9e8c-f519cf15364b", "comment": "Malware payload", "value": "fa39239595bf66b7ca08998190e1b562", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch3", "colour": "#009966", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787278751, "uuid": "8551b2b2-65ae-4d48-a97d-bcc18d0e5460", "comment": "Malware payload", "value": "9f82627e20a6fe672be04ef282164b064ef65dd8a3e155c2e3b879df814b7d62", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch3", "colour": "#009966", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787278751, "uuid": "ebd72c11-e14c-429f-a94e-2a796316d689", "value": "T1B4339319927F127F351BD8E17BD0678232D1201FD356E92C7FFCA2904F1ADAA9681B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787278751, "uuid": "14fac245-e8f4-4c90-92df-c68685dc9f49", "value": "768:e7oBFlFvFEFEk8cb6RpCtLYUsFoDxKfb0LWClg2Z:pB3x2Kk8cOMLYUs+xKf4nlg2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787278751, "uuid": "5679203b-62df-4e6e-94f9-38c08392f512", "value": 53760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787278751, "uuid": "69f08255-cb44-4873-a504-46f45aac9bed", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1c76f9f-9d06-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787278830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787278830, "uuid": "f56323f5-ea4a-41de-8603-b75e72db441a", "comment": "Malware payload", "value": "c404616c4355e13d5cce60160085457e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787278830, "uuid": "c3a1ee29-2a52-4f18-a24a-ddf49c1019fe", "comment": "Malware payload", "value": "a54f31249add9ca16ec7ea5b8c3fa786cbf42fd9735f08864c7fbab9b430d80a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787278830, "uuid": "8c28c89d-148e-4e52-987a-bfbdfebc6e9f", "value": "T1D393E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787278830, "uuid": "b440e400-689a-4e4d-800b-587a5aa18a1c", "value": "1536:dap9kuEEwH8kw0PMqpYJKNoE+pTYeGf8BqLv3Tli0oRGpNuqYPPXVIH8LutVWw:MIuEEwH890j+pHBqv3Tli0oRGpNuqYPg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787278830, "uuid": "80664362-75af-4a22-8db8-2a46a53bf14f", "value": 89613, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787278830, "uuid": "f5c7bcac-92ba-409f-acdf-de467cdf9a63", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abeba427-9d08-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787279599, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787279599, "uuid": "7d79b9f8-0275-4261-8c97-dababae34a51", "comment": "Malware payload (Mirai)", "value": "51e0e9f4ab78e24f3997abaab458ba51", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787279599, "uuid": "a71a7c95-2c76-47ca-a490-eb5aadaab2e0", "comment": "Malware payload (Mirai)", "value": "6dfddd85b419d20ae75a50f4ad4835fb2da7d4522c168351e778ecc48e448b8e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787279599, "uuid": "75043745-9563-4b41-80aa-9a71fb708a9b", "value": "T17AD3128FBC48F6BFD41D6CBBAA4C2918F0617B3697CA16286EDD7500BF420D5E3124", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787279599, "uuid": "7783812e-8db8-49f7-97fe-85a0dde8ed76", "value": "3072:JmI+oK5LzNVM8oPAE9utxpldUaBzu7MCEYysL60cc:4/K8oPwtHlOaBz6EYyu60cc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787279599, "uuid": "f482646f-b1dd-4d30-bfdd-f00eaa3ff104", "value": 137096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787279599, "uuid": "257ef393-3eb9-44c3-b7bc-040239b8086d", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51575cdf-9d09-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787279877, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787279877, "uuid": "95896907-0dc6-4cba-b39f-c7adfffef52d", "comment": "Malware payload", "value": "0606695bb4240545cfdde2f1fbc837e6", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787279877, "uuid": "f48a42ec-03d4-4856-82c9-60a5cdb0a74e", "comment": "Malware payload", "value": "94fa4860eed676bb12fcc1d94592df10a37d2e434238a57f2660108e3f61479d", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#615a56", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787279877, "uuid": "220c11b6-2d73-4e08-8484-b54ce232fdf1", "value": "T1D7178E7AB2B800A4D4BBD0BDC6575617FBB17859433067CF1A909AB61F23BE05A3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787279877, "uuid": "145151b2-20b0-4acd-93d9-589f5e31d4bf", "value": "0573cda9a1ea1a60788e33b75b225cda", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787279877, "uuid": "ac440fd0-d48e-41e9-97d6-7d104b97c993", "value": "393216:QCl39AvSUELtnz7KfXizMPz8AGFEgtieCf5eo:vl3KviSctCf/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787279877, "uuid": "e3de1926-d0e2-4ebf-9d86-70df807cce0a", "value": 19435520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787279877, "uuid": "130e23b5-a7f4-47be-9b91-dd06db3e44bf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1787281107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787281107, "uuid": "ee1a9918-6b7c-4815-819a-5c1ba797fe81", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787281107, "uuid": "e30b76d0-9c1c-45f9-ba89-27d6acf917e3", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787281107, "uuid": "3fdbeeb8-2586-4858-97f1-4dfee235e5ae", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787281107, "uuid": "7c6c1514-bf08-45ee-b52c-56847bb0d470", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787281107, "uuid": "ad1d3535-9fe4-4f07-8f01-88604000c543", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3d9c0a5-9d0c-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787281357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787281357, "uuid": "b98517c2-8863-4b9b-b6f4-94d64b5845dc", "comment": "Malware payload", "value": "1e04707b36350443a05b9fb8dd1e2d42", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787281357, "uuid": "515e6bad-cabc-480a-956c-e116fedb30e2", "comment": "Malware payload", "value": "bf91d94eed479a35f49d4bff6ea6c59197d2442070d5205cddc456a4feeda098", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787281357, "uuid": "e8519c66-c0f2-431e-b69a-0c17a9aba885", "value": "T13563F97378C6142A311F028F6107732CB5BA99D6DA01D9F1F6F661285BB4FA136F32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787281357, "uuid": "8d0f9519-2120-4db3-9734-b35f2ed999b3", "value": "768:uNZdypGVU1pupU0nMF/FbD3tKAD27p+EeLSJb9ee7xOqayPWuo0sCy:uFyp4UKMpxD3tKAD2VDeLSJbnOqayPW/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787281357, "uuid": "c84837a6-d312-4ff6-bdbd-65ebcbf197d0", "value": 70350, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787281357, "uuid": "4f8ae617-e38b-4fcd-a476-ce1f301036b1", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da46fc95-9d0c-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787281395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787281395, "uuid": "a77a3635-0149-4b40-b2b0-5b39f3d15fdc", "comment": "Malware payload (Mirai)", "value": "ed34f92431fcea4843182b0135b23972", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787281395, "uuid": "84fbe250-ce7a-4dd7-ac91-9d617cd552c4", "comment": "Malware payload (Mirai)", "value": "b4f33b8d09302a019f8dc1609ac22ccced6f27f74c7506247915341ac5a5199b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787281395, "uuid": "0d7d69ce-4ed1-4862-8531-bfd064f47baa", "value": "T1A6B3125C9ED28701DC9B7FB54E0BE45893981936603BFCD44A802ADBEA702C5D5327", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787281395, "uuid": "8b223290-080f-4483-b2a7-d7efd0b09593", "value": "3072:bnHGFBU2s7Q19QFbwA2k+tN0+RuzgOYDF61nvpEanx:bnHiU2srB2kuN0+4zg9A9v7nx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787281395, "uuid": "2f0a02da-074a-477c-87ea-517efc7ee8c9", "value": 112296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787281395, "uuid": "4bc891a1-cba7-4da0-b593-3f4eb589fa7f", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0926a12e-9d0d-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787281473, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787281473, "uuid": "834b8a30-e83c-4fa1-8676-af41077982b1", "comment": "Malware payload", "value": "43cfce10933391ca740380e9b63ac45e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787281473, "uuid": "2db4551b-7180-42cd-bd7b-1adba21c7819", "comment": "Malware payload", "value": "d38e3dd8db9e36611ae50ab455bef763e1109f543f48f2f77a88a3c8589509b1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787281473, "uuid": "d2c774f6-ebd3-420c-8b22-a3243bf846fc", "value": "T157F3E85EBBB23276721B8309FAC1B768916DC153EA011EE7BDB5F118CBC229201736", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787281473, "uuid": "961fa7e5-8fe2-477b-ba13-fa8c84dfce6c", "value": "1536:japAr5lURr4kjofmmkWl0Fr/vqLBavZWkOA4YXhJgTnUX0vZI:Gd4kyA4uJgTtW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787281473, "uuid": "d4d88b1c-45d1-44e0-8238-4ebb0b20c51b", "value": 157652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787281473, "uuid": "0c0c1d4b-d65f-40e2-80dd-c9dee34f6182", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ea29f90-9d0e-11f1-8686-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1787281993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787281993, "uuid": "f2df7f09-c645-4dc2-abef-099fe39ab949", "comment": "Malware payload (ConnectWise)", "value": "eb3815f639e96df5dfff4eac36552750", "object_relation": "md5", "Tag": [ { "name": "217-60-241-32", "colour": "#26a38a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787281993, "uuid": "0648c056-019a-4230-908d-9474511af151", "comment": "Malware payload (ConnectWise)", "value": "377339da9394e4590baa1a2aa8e433cf676718bb83a50a37fb9399eb6c8f62c7", "object_relation": "sha256", "Tag": [ { "name": "217-60-241-32", "colour": "#26a38a", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787281993, "uuid": "22bf1b52-994c-4040-97c6-fef7e0fb17f1", "value": "T13946E002B3D695B6D4BF063CD87A42A96674BC044712C7BF57D4BD692D32BC08E323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787281993, "uuid": "060ecc68-80a9-4302-b5a5-437f2a9dcbc1", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787281993, "uuid": "c2af0a82-b996-4820-b356-6489d02c86e1", "value": "98304:ozs6efPhFFNUhJFF3s+BoiGg1Gc977zbt:AfefPCFF3bBR1H9773", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787281993, "uuid": "49efe95f-4090-4d11-ab40-e5eee28815a0", "value": 5642016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787281993, "uuid": "9a797cd0-b919-4fb6-9b17-fb9a79957b29", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66f64df0-9d0e-11f1-8686-82aee05be84a", "comment": "Malware payload (RemusStealer)", "timestamp": 1787282060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787282060, "uuid": "4d9dbde8-2d6e-49ac-b4cd-5b2a09211689", "comment": "Malware payload (RemusStealer)", "value": "79f820d76093b542c937cce8ebda5867", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemusStealer", "colour": "#ddd7e0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787282060, "uuid": "4402b8be-bf4f-48cf-bcf1-6d76ff069c1d", "comment": "Malware payload (RemusStealer)", "value": "27b521e776ee083bfdadc58df6ea8220acb7b0c94340124a00b0c3783ab050af", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RemusStealer", "colour": "#ddd7e0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787282060, "uuid": "7d794294-3248-45b0-abef-73c591213054", "value": "T1A275230133E0107AD47E9770A5F24B572AB1B8E3DF30D69F12D966190E23AA6D6317", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787282060, "uuid": "61c17c5c-0e24-425e-84ab-dcc4c4733c6c", "value": "4cea7ae85c87ddc7295d39ff9cda31d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787282060, "uuid": "366c3d87-7520-4ed9-b036-d406203fb9e0", "value": "24576:qOKB+Us6j8KdgLqzqXiqT2UU72jvqSL2rseI2RKA09EC8IWMOxhynMTCADSI4:TaR86Zf2zUSWSws/2RKASwQETCO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787282060, "uuid": "f1764ced-1641-4293-80b3-9a22d3ccef24", "value": 1637376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787282060, "uuid": "36231bc6-a956-4b47-aba0-056834df16a5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93239e61-9d0e-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787282134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787282134, "uuid": "e7bea140-a9f5-4961-9098-f4d0126ec214", "comment": "Malware payload", "value": "118ae7b36ba5743b91afdfb538e40d48", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch3", "colour": "#009966", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787282134, "uuid": "92087243-6dae-4a17-a261-a627a2724d8f", "comment": "Malware payload", "value": "c0df334ca0f127ffd41a004ea88a7751112040bf6c80fd62efb9b5cdef12ad28", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch3", "colour": "#009966", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787282134, "uuid": "1cdc6a1b-6eaa-4bf0-b8a3-e4e9ccf6873f", "value": "T129339419917F117F3907D8E53BD52B8332D1212FD39AE8187FFCA2504F16DAA9A81B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787282134, "uuid": "6489ad82-dcf9-4797-8f75-a74f6575cd8a", "value": "768:e7oRFlFvFEFE4tQU02UAw1fmv5dUKhURd5vHCwXLLdMM:pR3x2K4tF02UAAfmv5dUXb5K+L6M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787282134, "uuid": "aa13772a-c41f-429f-ab62-5b79f6ffe14b", "value": 51127, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787282134, "uuid": "ad13f6ed-d404-4a7d-9100-fde342b2e8f4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc6e8e0f-9d10-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787283090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787283090, "uuid": "edf9f8d1-cf56-4c14-807c-499d9b0f9748", "comment": "Malware payload (Mirai)", "value": "a4d1560a276dacdd9b3f9875924aca4b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787283090, "uuid": "e42c3114-f42a-4550-b48f-f922089fdfac", "comment": "Malware payload (Mirai)", "value": "85ed2a23d0064207abd86f72c4f1ed13cd69657fc6f00f6f136f3988d3e39f47", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787283090, "uuid": "7afeae86-066c-4b4e-b191-bdc829210e0f", "value": "T198A3028D19B248F7D4F6C5FBED1FA48F6243230593094DE9AAF8A4492896DC6464F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787283090, "uuid": "3350af3d-eb1f-4ad3-8f27-dc038a32dc3f", "value": "3072:f3/jqxuBXJYw156L+OmLZ/ywoz+rkz9m9d99zadiu:exuBqw156COeByfQoiu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787283090, "uuid": "d49f5acd-37bd-4953-b07d-72f158469c89", "value": 101096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787283090, "uuid": "f977f302-99b3-4dc4-8d63-f0126971306f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8a1e7d6-9d11-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787283566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787283566, "uuid": "6602b5c7-8917-4dfd-af4d-49a3f502a07b", "comment": "Malware payload", "value": "b42b16758f32d3e7dff67d417385b0f6", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787283566, "uuid": "35332b23-d639-4006-bbf6-d1acd09d2ebc", "comment": "Malware payload", "value": "47c2939b721718fe8a33ca78de4f196cbf521f0e0d480c59dd1e276e04d12005", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787283566, "uuid": "8a754802-df0b-453d-962e-bd5c77c4d3ea", "value": "T15223B319917F12BF3917D8E03BD12B8731D1212FD749E8187FFCA2544F4ADA99A82B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787283566, "uuid": "ef30ee92-e4c2-4f55-a3f1-0fe4b10ba7a4", "value": "768:e7ofFlFvFEFECtADmWL/WvcYbT2bvg9O84CJv:pf3x2KskmWLOvRlhxJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787283566, "uuid": "c95db6e9-132f-4a67-9abe-07c3666650dc", "value": 48793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787283566, "uuid": "c23e8fd3-ca0d-4fb8-b867-b7ac984fea63", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acdbd480-9d1e-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787289049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787289049, "uuid": "aa928ab6-6821-4b52-aed3-3f649c9b644e", "comment": "Malware payload (Mirai)", "value": "4d35590c66fceecdc4ba7d057b032530", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787289049, "uuid": "49a35da8-842b-47be-ad57-657fb91e192e", "comment": "Malware payload (Mirai)", "value": "9cce743cdcd606fd7e5d4958a09a777f31e0b63f0df38df81f5a51180ccff2a5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787289049, "uuid": "31916aad-1b35-436e-af75-ee7f65501664", "value": "T1DFD312E1C2C9B047C59D2DE36965280FB4F7D7B5AB2CA559FA82CE1DC52C703348A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787289049, "uuid": "5846456b-2666-4580-b25e-2cf40246a689", "value": "3072:uz+KzuZQb4D7fM3lQKDbn9yuSH8Vx9C6ERqyvP:uSKzuZQ8D7XKDbn96m9C6+3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787289049, "uuid": "cd497571-f861-4d94-aa93-ce5c1ed94f66", "value": 137336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787289049, "uuid": "102cc313-5ca2-4d52-a84d-7bfbc7c2c794", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebd49177-9d20-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787290014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787290014, "uuid": "5f5fa90c-a464-4244-b4f9-86adce5c9a17", "comment": "Malware payload (Mirai)", "value": "2b6ccf19385807dd7d9eb6ab14e81d47", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787290014, "uuid": "f2f3ba8a-d77a-459b-89ff-1c835eb5196d", "comment": "Malware payload (Mirai)", "value": "3057adec8768ed3d09350b72c9f199a2bbb8db1a2a2aa289969e41c95706dd7a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787290014, "uuid": "4e637ae5-131f-488a-9d22-207129fb9d98", "value": "T17FA31275299D1CA3EC817D716FC129C2205F913F432D22AB56B2F22DB9282D92DB48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787290014, "uuid": "355531ed-7f1b-4b03-8819-98ee536d9635", "value": "3072:FNO3kdUd2IRQt5s305vZ5qctWZ/3aJIA0z62J:F4392oQn5NtC33+2J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787290014, "uuid": "b3800157-2224-4246-9278-b2b295a81c96", "value": 104460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787290014, "uuid": "da3b2385-5e0f-4af4-bd76-a11085adff17", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c58862a-9d21-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787290283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787290283, "uuid": "a8d32d1e-bedc-4fe5-8087-c44f0c0848a6", "comment": "Malware payload (Mirai)", "value": "edf1c0a056c382f34e214332bb5aa8fc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787290283, "uuid": "ddcbe6b1-ea98-4e7a-8690-2c224f7051f3", "comment": "Malware payload (Mirai)", "value": "b654a72ef7fae0cd7401e90f2000000716f4dc09ea2dd5bbd13947bf4414a232", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787290283, "uuid": "f07aaaa9-4fdb-476d-b656-bc789a0f75b5", "value": "T1C293C70E2E329FBEF6ACC23847B78A21A35923D513F096C5D26CD6151F6038D541FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787290283, "uuid": "7a7ef1dc-8fcb-4132-9dff-9710f3290783", "value": "1536:PTYMivCB8nrsTUc60a5XMNieKq3sDZe3ThKJtLha5:PTYCmnUUf5XMg2sDJJnI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787290283, "uuid": "468359f1-7782-46f5-9934-b9619d56180b", "value": 93524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787290283, "uuid": "f2850a51-689c-49c8-8115-01ea7d85f50c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cce97f59-9d27-11f1-8686-82aee05be84a", "comment": "Malware payload (PureHVNC)", "timestamp": 1787292969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787292969, "uuid": "f198d62f-15fe-4f3c-bb79-5b4af70877de", "comment": "Malware payload (PureHVNC)", "value": "4cd8451456dcb48c3b55bfc915590181", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787292969, "uuid": "78e97faf-c450-4abf-be17-bf3bd670d8d9", "comment": "Malware payload (PureHVNC)", "value": "b10f3fbabfb3a11d98f2e9bb27872686ae06490b2664922c4927116f442c433c", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787292969, "uuid": "76fb9a93-0704-47ed-a5a2-b456c65fdb14", "value": "T10E5533545C2A1472DF60411795FEC22699F0F0BD10A877A32A4FCEE8BBACA947C817", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787292969, "uuid": "4e084fc6-c303-4878-ae44-3ae749b4c057", "value": "24576:Tu/7UevuHB3Qe/6D3GOt9ZP2SM8HiaaOlDs900gUqTQ3ftGoHaoRjX0oCZNbuNJS:y/7lvuh3ZcGOtP2vOzBlmgUqkvtZ5koa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787292969, "uuid": "17655ac4-2274-451e-b53a-640b4cf3872d", "value": 1379783, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787292969, "uuid": "ee400f8b-2f05-4db4-8098-820f13174e59", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66d05766-9d28-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787293227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787293227, "uuid": "b374028c-3ad3-48b6-86f3-726f27779927", "comment": "Malware payload", "value": "2ca1cb8cc68d5e4b4705de863b6f368f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787293227, "uuid": "8ba375ad-b017-4bdb-b9a6-062922998fdf", "comment": "Malware payload", "value": "154fbd3f3c78104e21ae4667f4bf4faaf8c839eb2d08a0d944a2a48c32815507", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787293227, "uuid": "0e612619-4b00-4f75-8a17-91b522a49f12", "value": "T1C76633DBEF14D62CC258B4E15089506E446DCA73723DA4AF8F9A8E7130D88DE8D46F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787293227, "uuid": "6077c200-d79d-4d6c-9acd-b02ffec92ef4", "value": "196608:+FtQJgAKzN9icfJEtQCljqm1+fm/YAldE3tDa6E0eU:+XcKxwcBEBR+fm/dlG3Ag", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787293227, "uuid": "bb3523b1-971e-435e-b095-e257bca46308", "value": 6924291, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787293227, "uuid": "ff8fe3fb-f965-4353-b9ff-eff0d3b59d51", "value": "application/gzip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ef6d604-9d29-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787293751, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787293751, "uuid": "70e189c6-b7d9-4419-aa32-56b11369d2dc", "comment": "Malware payload", "value": "b715ffdff8d8be762d5ec403e67a117e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787293751, "uuid": "83d06591-1728-4c34-aabe-0b9e9acbe1f9", "comment": "Malware payload", "value": "16d01ce096cbad7ac1910327efb344b5e59be2ac189ebf3623e94a4c7f3fde47", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787293751, "uuid": "d83316f2-7eb3-46e1-ae4e-f3e7918f54f3", "value": "T1EA04237A683D6C723F536B438A64800799DF12BA2BF113814884ADF020BFFD1F599D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787293751, "uuid": "a7462ed3-9eca-4ee4-b9f2-c959c6c5c4c7", "value": "3072:ke0GcUCi/5Iml3qYklvmBCTZjYgh9co9dfJlfoHI/J91O1hC4:ke9h/qmprkwc9VOKlfhJ9v4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787293751, "uuid": "a4b7fb55-8f38-440b-99e8-3cf1d1f472ee", "value": 186912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787293751, "uuid": "25d61b8c-4ddf-45fa-a86a-b33f71f7dd2d", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a668ed4-9d2d-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787295246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295246, "uuid": "20023f93-443e-46d8-a352-67ffe8c729e7", "comment": "Malware payload", "value": "0ba7306d6e79a999dc93b516085f2fc8", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295246, "uuid": "c66f2df4-e08b-4001-b8af-c48fe0daab12", "comment": "Malware payload", "value": "748b02d9b7055a7a63507c06091d841974f204a0c1470f2bd704e4c493fb7fe3", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295246, "uuid": "3a2ed768-b4b6-45e2-8f3a-0c768acfc8df", "value": "T1DA64C5FBB20A4A4F45160A28E44E0650FCB8D85BE3F694F0EB0E5DBA8BD55041CF5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295246, "uuid": "9b4097c1-b1bc-432b-bb1a-4bde7ed148f8", "value": "6144:HU9rJLl4UOgZGIlR1mE4+LHV32OpfqvlTlh:HAllZGIn1mGp+h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787295246, "uuid": "08f961d4-b868-4694-bb78-50df9d3d9fc5", "value": 324272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295246, "uuid": "d810908b-a832-4eb8-b465-9129afc02565", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f8bb63f-9c99-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787295247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295247, "uuid": "d914b501-3d3b-49c2-aaee-caeea3ce4a5a", "comment": "Malware payload", "value": "8174966ffe5631fca12b972c961effd0", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295247, "uuid": "25c48b40-ebcc-46d5-ae06-31a4a0d1a3b4", "comment": "Malware payload", "value": "ed6e8b04d02cb18fad664fc9003fe1d5cca8731ebdbbf3a07bb44c1df4b2e4e8", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295247, "uuid": "fa692ccf-ae99-40c7-b3c4-55595935cc81", "value": "T1CEB533B0640B7D9A3D7B68C8E4612124FC15AD9B91EA1439FD8BB6F858C9439DE7C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295247, "uuid": "df6f8684-70f6-4409-b8a6-94c81638aed8", "value": "49152:8A3C2JyJiuj0gtd7D5188bLtUqh9Scxrk2:8QFcXj0gP7l1FircxrH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787295247, "uuid": "85524ddd-8242-42c9-915e-9234d6f44397", "value": 2362769, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295247, "uuid": "989c46f0-ec6a-4e04-868b-be83937a945d", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b5c9b41-9d2d-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787295248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295248, "uuid": "392d41cd-34fe-4151-a7ae-3a0956fa00c3", "comment": "Malware payload", "value": "f6dd035b3d5e2cd788f1d993fa6d442c", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295248, "uuid": "5e99e6b7-3058-449a-8b3a-c86cadd61dff", "comment": "Malware payload", "value": "21648cc640add1d775c2ba92b542621215132946e94af6b321f7d9d2921c0a9d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295248, "uuid": "f3c71b23-af4b-432f-b72b-b36b4f61acbd", "value": "T15044D7FB66174F8F45120E18F4181614ACFC995BF3F690F1EF0A4DBA9A9941809B4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295248, "uuid": "df894036-00d5-44d9-87ac-9035596a62b9", "value": "6144:47gtOg85JJToRprD+wVHS40xPo9rE/bcG9J9:47g185JhoRprywhS42P9Fb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787295248, "uuid": "6bc9117a-3bda-43ee-8f3a-7b314dd3ddb8", "value": 253952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295248, "uuid": "5a1ced58-ce22-45c5-be5c-2174400bc113", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f22ec0a0-9d2d-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787295608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295608, "uuid": "82bd069d-8b66-459e-bef9-8afad841c0d7", "comment": "Malware payload", "value": "9014dac7d1b1355420a27c428b31c139", "object_relation": "md5", "Tag": [ { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295608, "uuid": "22c5e8c1-642b-453b-902d-e070eaedc6ac", "comment": "Malware payload", "value": "44d5afa933383f651ec0924c3ac81ffa968b96fbea5484a7cfeea89bac5bf000", "object_relation": "sha256", "Tag": [ { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295608, "uuid": "16cd543d-3bc3-4de0-b606-c45ec0e5abc8", "value": "T105B1A6136D640EF1131642AE8E9B30551282431B06AE6D28BAEDB708FF398F566B13", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295608, "uuid": "7b02c89d-556b-415a-9c56-0381e62db41c", "value": "96:OH97RcQJnrXFEPeYPbfj0txol9frpI/uxCtVjX/b3Sdfoz02A2Yfqm8:sRc6nzFEPe0bb0txsZNI2xCjC9ozTX1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787295608, "uuid": "3526d874-7540-4de6-ac09-81133dcdd08d", "value": 5397, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295608, "uuid": "62d8609a-43bb-48ba-83e3-67982cfb8161", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f260709e-9d2d-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787295609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295609, "uuid": "0d98e8f7-9114-4893-8f45-1360e5fd18af", "comment": "Malware payload", "value": "cbad6c06cdd34ddf68df4ae2ff101e92", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295609, "uuid": "4f9f78bd-bb43-4fa4-8fb2-22c099cbcadb", "comment": "Malware payload", "value": "9cb3b72cbc020d4d2f92d668a58c2bf3bc04555f686b1d22467f0384d02836e0", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295609, "uuid": "7f97c706-92a9-47f2-b5bd-9c3d54c71a21", "value": "T172E07DEE51698731865161E2F1F488AAE44E17C54D57980066CFC82EC53939AE1DB2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295609, "uuid": "7379d199-c371-4fa2-9fd4-f3bb0fd5e852", "value": "6:Slfs1YVfV7jbSMvYK9BKL2uJcXc2WHuKPML2S6qWHlS8+Wu2AH1MFkwCn:SG1QN7ngK98KuqW3SxUSBt2I1Me3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787295609, "uuid": "98a7e852-7cef-4458-ae78-b0268c7fb0de", "value": 322, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295609, "uuid": "1d9f1af1-e51b-4140-9c74-2ecfbb3a7c06", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2b47aef-9d2d-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787295609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295609, "uuid": "ea1c4fa0-f6cf-46ea-aa89-c27be333bb0d", "comment": "Malware payload", "value": "6134dd64a03184e6df808fea4246c12d", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295609, "uuid": "19b6bfd0-e0d5-474b-bab3-858e7a7ac44a", "comment": "Malware payload", "value": "8026d0802cf77574531070c123aabd3fb6c28f39b56efaed72f129e0a530007d", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295609, "uuid": "f3c43450-cc2d-44ca-9abc-2dc056104da1", "value": "T18495128EF74213F6C93AA1B494515202BEA0BD060B20DDDF3A142DB62E679F91F3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295609, "uuid": "4e0b980a-c764-442d-bfb0-72167745f74d", "value": "5a08440e22a99b9fda864d620400de65", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295609, "uuid": "90c82fde-97b2-4e27-8ec1-2d8a1712d3d5", "value": "49152:AQS36xCKn8A1l+ko/YqbTNyA9c8GagmXlslODAZNOJ8xE3h:xT8A1l+pjbJzgIXDe+xh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787295609, "uuid": "0d141734-bf8b-4ed8-8f8a-3fd7e49cd451", "value": 2051072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295609, "uuid": "0dc50d6f-1ef9-41a0-8c5c-bdfdd4ccc27d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58cbdb83-9d2f-11f1-8686-82aee05be84a", "comment": "Malware payload (TELEPUZ)", "timestamp": 1787296210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787296210, "uuid": "4a08e2a1-52e5-48ec-ad6c-722a27d1f331", "comment": "Malware payload (TELEPUZ)", "value": "6abfa2296fc138e9f78eb98c5247accc", "object_relation": "md5", "Tag": [ { "name": "TELEPUZ", "colour": "#87671d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787296210, "uuid": "b65de997-a9fd-465a-975f-6a81dd31f4fe", "comment": "Malware payload (TELEPUZ)", "value": "86b7654226949a31ae3b98e93647dd583c06777f8d168381e910ca01096070e6", "object_relation": "sha256", "Tag": [ { "name": "TELEPUZ", "colour": "#87671d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787296210, "uuid": "6e8d51e3-7232-46fb-b850-bbb77c79ea60", "value": "T111130993F2DA28DDE5A680B9C06963F3E2B8309912105DFF53E0C8B85FE1B15367A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787296210, "uuid": "b5da904a-5e0e-4368-bca6-3255158d5978", "value": "492bf518215c89949271eaf1595fd8d0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787296210, "uuid": "fb381a23-759f-4fd7-8107-41d721853f0a", "value": "768:IiBSdxTINV6YIflJoxL7OhDrVsITdBUBo:IiGxTIbcXoxqh3VtBL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787296210, "uuid": "35564dd5-c36a-4c56-9310-e45c5e0f9ed4", "value": 45056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787296210, "uuid": "e995a0c4-ee09-44cf-8d2e-2c9d920b8edf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a9b7f6c-9d2f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787296267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787296267, "uuid": "4d3e345e-3e29-41ee-8812-563c4805f41b", "comment": "Malware payload", "value": "74b9ee749c09c7357d9ec149394975dc", "object_relation": "md5", "Tag": [ { "name": "TELEPUZ", "colour": "#87671d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787296267, "uuid": "532c1c45-596c-497f-8eef-2d1c7f15a45f", "comment": "Malware payload", "value": "e5e0c20f0ecb7eb56737b2f8f85620ce477342b14a7cf95549ff362eac981173", "object_relation": "sha256", "Tag": [ { "name": "TELEPUZ", "colour": "#87671d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787296267, "uuid": "d87d4c16-c0e2-41e9-9534-10490d54625e", "value": "T18C044A66229D008CC5F7D478ACA1D227D1B0B9880BA135F32982DDB51D5AF66B93DF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787296267, "uuid": "c9a53ed8-246a-4982-a327-c5d8bcc33893", "value": "822c7a92ffdca2375e609ef6663afb4d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787296267, "uuid": "8bc4bc9c-2917-4c6b-86aa-c93086676db1", "value": "3072:I9z24hAs+q/atX6jdewNr35bq54EOk0aXSlY6:Ih9hAs+qitX6jdTNr35YUY6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787296267, "uuid": "398b1e9a-93c5-4caa-8e00-93f2b4829f80", "value": 179712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787296267, "uuid": "f1ce0f2a-2d65-42ab-bb9f-b5a50bae0261", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e457856-9d2f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787296326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787296326, "uuid": "81443f03-23c4-4deb-93af-cc01f1a0b7e3", "comment": "Malware payload", "value": "5a0639f53b78ddd75f38a3f1d1927b9e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787296326, "uuid": "3da8b257-767b-4adf-abf8-dbb67da5a282", "comment": "Malware payload", "value": "a35e2a8508534987fda4a07db9cacc7bff91e8b65293ab0c3d6fb39c0850f8ee", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787296326, "uuid": "2b2695f9-e95d-4a4f-bbf4-4cfdae5d7a2d", "value": "T15C5533F19B0A71097F264C3EF07AC40576A0B7FB82985A03594FDE058DACA3756A5F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787296326, "uuid": "f3daba8c-2e6a-4b9f-803e-5d9af8aa6ca5", "value": "24576:0LTOXs07F7zTgmrIchvJntb9zbvXnqCGxH3u24LaW1CQVUk/WMDTvgqTQ3ftGoHi:0LTFaF7zTgYhFttbvXqCGxeVLa0yfpq7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787296326, "uuid": "103470c2-85be-4e13-93e2-8249e96e66d1", "value": 1387428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787296326, "uuid": "3abf0346-8a36-47df-bd9d-96e73b92ee95", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0258e28e-9cd5-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787298022, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298022, "uuid": "6dda83d1-d411-4ef8-86be-71dae60db76c", "comment": "Malware payload (Mirai)", "value": "24eec0e7b8c76b9cffecfc066c953740", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298022, "uuid": "2a12030d-039a-4000-a8e7-550f74a9e085", "comment": "Malware payload (Mirai)", "value": "1e29360b5e4f58062895cac59fa21b55c24f45c2d2d02a52a149787bee0634c1", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787298022, "uuid": "8c93ae4d-0763-4e60-8832-6d2b6b692c2f", "value": "T1B6534B85BAC2E8F6F852007D60BF5B724E33E839A076DE9AC7E994379C06540D2177", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787298022, "uuid": "a4143c83-9a1d-4307-818d-d2c0fa769738", "value": "1536:d++zlLn7kri2GZLBtC0Z4XsZ11LxKJuPSFzSjDrI:dp1Wi2+BsIisZ3LxK4qFd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787298022, "uuid": "ed6e5250-694f-41e1-9b4f-878282e42141", "value": 62672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787298022, "uuid": "0779b275-2b28-494f-8162-f8ced195ca97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b2052fc-9d34-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787298334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298334, "uuid": "c530905a-e871-48ae-a7f2-6ff108d2a293", "comment": "Malware payload", "value": "f69e2aca41277a85be59041f4431334b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298334, "uuid": "b3f0aef4-968e-40c8-a1c6-46d8d4b894f6", "comment": "Malware payload", "value": "a22b370282b97d484bfa96df56640a0a8591b9ea50fa05a08f39df6a74373de7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787298334, "uuid": "c80e8731-bdd3-478b-af5c-0ba0bdf27bae", "value": "T1A9E0124D83552F43C58E33F8649B43332740EC314675C74F4304B8514E032843C463", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787298334, "uuid": "c3bdd459-747a-4b06-947c-6c3ae7cc3423", "value": "3:Bknkl//hlM/lVl/gUh1llqfY5F3NQqGylE/lr/XOlvlPtEn:BBQgyDF3NTG2suvk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787298334, "uuid": "91156bd4-f24e-4b99-a714-26a2fcb995a3", "value": 308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787298334, "uuid": "1280715d-731b-4596-941c-0ba43d381328", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d87b84a-9d39-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787300566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300566, "uuid": "96244184-df79-4a4e-8779-757aa2d33609", "comment": "Malware payload", "value": "c958ceb26c207be1f7de6c4765ebdd91", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300566, "uuid": "9eb14687-f164-4b91-8475-830df4a0ed08", "comment": "Malware payload", "value": "31de5c5d0a3483e831e4f9348d46b3c5309177a7f9d6da537fc970f57f103901", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787300566, "uuid": "c27c19fd-8702-4e49-8fb5-9e3f6078cf91", "value": "T112E423F58721BCC5D96F66BAA74D6064E0FBAE15C421C4022162539B540FBE23FAFE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787300566, "uuid": "17277246-9ae9-495a-9ea7-b67600c94804", "value": "12288:AQ15DbikhpVPmOC34v6Q480iTcJ2VMrPddbqdAalPDxi7zKPUqkpDsVXvd0n:Vxp1mOY4l0iTDVMrPdRmAoPDWKDkpDs6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787300566, "uuid": "9332ed0c-88a4-4c10-aeb8-c4eaa514ec4f", "value": 707884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787300566, "uuid": "8a7d3bc8-5a3e-416b-b97e-7a5af5bad920", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae21708f-9d3a-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787301078, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787301078, "uuid": "629f9d22-19ff-4d16-8956-120cd5183586", "comment": "Malware payload (Mirai)", "value": "13c14e6c86e4d98d296cb68668d3d9d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787301078, "uuid": "00969e39-2f79-4152-9a15-4a0f35f22eb5", "comment": "Malware payload (Mirai)", "value": "b1a9ae7d0b9b6bc29c39d91d9499a87e50ee166dca40b0070c32d2d8cf952609", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787301078, "uuid": "0ba97d7b-007c-4bad-afba-5449c82a1078", "value": "T11B443B56AA824A13C5C3173AFA9F41063322E65693DBB306FD1CABB43F8725E4E735", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787301078, "uuid": "68ce93bf-851b-4e84-abd5-2e1ed65ae872", "value": "6144:13htnpS1sNu3DRPeH00ABkPcaGzolGHcJ2AGCFwEssMOgh5o7KTlL/KoU8+bfLk9:j9pS1sSDRPeH03BkPcaGzolGitcEssMj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787301078, "uuid": "e1e85659-06a5-4b7d-b7a1-5b07170e2401", "value": 273088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787301078, "uuid": "797f8486-5702-4fd6-917f-1b159c4941fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37fe5437-9d3b-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787301309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787301309, "uuid": "4c32ad06-6dc1-47b8-b127-70983328cc6a", "comment": "Malware payload", "value": "740fa3c6af474e9cf62dd7b11ca2f9d4", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787301309, "uuid": "31ee3be8-9446-4fad-a57e-8cbb16d95d3d", "comment": "Malware payload", "value": "e10edfd0d41604111f647a7e0358a732d36f3bd39f953126f06be564539760c6", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787301309, "uuid": "477d64ea-9f45-48ed-8b66-623ba98e3892", "value": "T1B055337B13127A7CAB31231E7406C015BAD5B1B7936B220AB75CDAAD4C76D2068E17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787301309, "uuid": "3ee1037c-5dac-4d60-870d-c94ceb0f5f7d", "value": "24576:iX9Jj1eXQ57cIIA667eZvQj89HxmKdTF9CKqTQ3ftGoHaoRjX0oCZNbuNJy:iX9R1eAKUZyheYHxmKdTrlqkvtZ5koC1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787301309, "uuid": "9dc6a84f-9720-4cdb-82f6-00ae735a0cb7", "value": 1385502, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787301309, "uuid": "b39c0059-3fd2-4924-9dac-5b120d28e142", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98c164f8-9d3c-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787301901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787301901, "uuid": "85d85d66-7ceb-40d7-beaf-17d882d486fa", "comment": "Malware payload", "value": "ed1b04b9d8ee4c790e1970406fd977f6", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787301901, "uuid": "3fe1f1a0-ca4b-4bcc-a24f-e67ba32dfb11", "comment": "Malware payload", "value": "335a1daa57ffa7b94d89fa6e2c6c810c0ea6e6a83c1484151a3754b12c775874", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787301901, "uuid": "7e177fda-0bcd-4310-b8b1-05b99df9105a", "value": "T1C62122618C5094F3C6EE8ED37E52AD16330FD4F60E66C7C62025486EE80792BD26C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787301901, "uuid": "83e56760-d791-495e-b30a-768f3ea66f1d", "value": "24:AWuVjLuVMoLGHxBlV3gLVF2k8vC7zPxjuD5lbjwgrmFuysDbNQ5iZpyZjoXLt3O:nuRudGHxbVO2ktzPKNZhIsa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787301901, "uuid": "df266bd6-0a5f-4958-b5c6-5963aaa59abd", "value": 1377, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787301901, "uuid": "c4b2781f-317a-47ea-b3de-0eea979a3d56", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c15491c-9d3e-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787302685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787302685, "uuid": "5994edf6-da90-4922-84b8-8854e94cc82c", "comment": "Malware payload", "value": "b18cfbad177f9742f9d84e57212dfac1", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787302685, "uuid": "fb46b8a8-8fd9-47e2-b764-fa02eff335d0", "comment": "Malware payload", "value": "45d2494587fcb6f53261a4101621a9de23a48703060bf1785da27ae38435d2fd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787302685, "uuid": "fba0c4c9-75d1-481f-a4f6-dc4b9cfe52e9", "value": "T1CA040EA3370042FB6D7AC99B7F3A0DD950BEBF1003A461E2DB5EA892D4B4747C4A46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787302685, "uuid": "c05afe17-48d8-4497-9c4e-5149dcec5e82", "value": "3072:uQnXuji/L8a2FJ46l/K8aNzzZQ7OgQZ4YGWvfuPc:ZvGHVIZbt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787302685, "uuid": "6770dc57-bf30-4452-b156-1d9ef7102030", "value": 175579, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787302685, "uuid": "17ee06bd-ca1e-42db-be7b-b417db83ad02", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61805675-9d40-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787303526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303526, "uuid": "4e416e7a-50b3-425e-b0dc-f76e56cbe2d9", "comment": "Malware payload", "value": "56fd896e839c0f75006986bf657860a3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303526, "uuid": "019b7f81-0b8c-49c6-abb2-4261f631a174", "comment": "Malware payload", "value": "3612214678e2d652f2b0989623e32963399913ac6fcc6e5be464f51f3e0a31c1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787303526, "uuid": "ee03f500-3f12-4711-8632-c58661d00b4b", "value": "T1FF24CEBDA19112D7C457E22B1BC8215428B2B7CE1FFC237BA82056FBD4FAC85A5394", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787303526, "uuid": "f48104d8-c352-47af-8dd7-4315072c4338", "value": "6144:d6eiyMKPzuBc6NoCZ0g5sD+ph/BsxxEqvw:d6hyMcu2Of5BtKxEQw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787303526, "uuid": "97123262-6311-4c5f-aff0-fe27b3e96797", "value": 223303, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787303526, "uuid": "c6321a8d-10a8-4430-9a1a-dd51aa2327ce", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ee3283e-9d40-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787303575, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303575, "uuid": "d6967e1d-5545-4c2a-8917-b2a03fe2a4c3", "comment": "Malware payload", "value": "92b007d08bb7b04c6556245571fc63d1", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303575, "uuid": "bd0cd37b-c487-4653-805c-b9b37d1d6529", "comment": "Malware payload", "value": "51be193204ad5553a731abd05a7cb3e41562c948063a94b2ae0f1682c5815260", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787303575, "uuid": "c103fe51-dd9f-43bd-be96-1c741e363527", "value": "T16011EDA709444C063334839A38E2F50D8853E14F0A8C6D9075A6907F69EA7C6CAFBA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787303575, "uuid": "363dd3d0-4bc8-4260-b001-14bc6dcc04ec", "value": "24:0WT6StHRFBN/WN/7NoflzRfl6bqIOOPWXcVgUeM:0WnBNuNQJNKOOaeV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787303575, "uuid": "6f608204-7461-40d5-85f6-224f8389c0cc", "value": 958, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787303575, "uuid": "c54cdfda-8f56-4ba1-9a2d-d75f95ffeadd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c272f3c8-9d42-11f1-8686-82aee05be84a", "comment": "Malware payload (MassLogger)", "timestamp": 1787304548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787304548, "uuid": "2f910252-a68e-48e6-adfd-e6f7215d90f9", "comment": "Malware payload (MassLogger)", "value": "c8ce644a88805f63b459efb67247cc09", "object_relation": "md5", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787304548, "uuid": "e9f7975a-87c3-4609-a6b9-f654534fe288", "comment": "Malware payload (MassLogger)", "value": "a0e213f268f341060841e9a57b646ce0ba0ade0a78651c7277729d95e0a6eaa4", "object_relation": "sha256", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787304548, "uuid": "a64246aa-819c-4b0a-bb30-2c8bb1b4c8f5", "value": "T158E533F1DF2D7BBDEE1418E521B83A150B735BB358996A66FBCC1E98C851025A13CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787304548, "uuid": "53026c40-4f43-4bd6-bb61-7750878f89c1", "value": "49152:T82c84BcquPQ6N4OTYVHK3ZDfNj2YhEUe/V8AQOS0r34hwLCLBB8Cg5PIdKbte/1:Mbq7PTTYVcZcYhER/VpXjGLBWCgKMogE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787304548, "uuid": "470e0dd4-771f-4f5c-9761-37c5c1b48f6a", "value": 3091733, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787304548, "uuid": "92eaf17c-3d46-4b64-bb76-96497929381a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10aa763e-9d43-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787304679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787304679, "uuid": "744f9650-625f-4205-9bff-8b9edb547daf", "comment": "Malware payload (Mirai)", "value": "886f2ce74f46bee6bbfc65706fdbe853", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787304679, "uuid": "ee7a0edb-03ef-4979-96d5-cc90440d7f50", "comment": "Malware payload (Mirai)", "value": "301004d2791136e2683f332a8d994db0cf6c101245e3cf5c67cf34b277d2f70b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787304679, "uuid": "493b843f-5147-4a3f-b465-566aee115a15", "value": "T18311FED163D490E3CC41407D12038A3367B29A2A8F2A4F70A36448B20CEB3417C493", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787304679, "uuid": "ae26668f-9b3c-4928-9fb4-be1bbffc09b3", "value": "12:BdHo0HGYy9fTwN5qjP81DcmjNTfVGP1mGhtoy1JoV2BQlXMvoX0:oBYufg5GPkYmZI1zQyfoVzlG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787304679, "uuid": "4e6a730c-3937-4beb-a139-a3cb6044cc80", "value": 872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787304679, "uuid": "04d799fa-8a99-4cd1-a46a-25c798df4f91", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c84cdc2-9d45-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787305531, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787305531, "uuid": "d796b22d-7256-476d-a5bc-74fbd3d90481", "comment": "Malware payload", "value": "2443694998cd8879edabe6092ee25ec9", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787305531, "uuid": "31be0b0a-5f6e-4152-8679-265ad22fe6ce", "comment": "Malware payload", "value": "654d2aa7500008fad3c383262ff813dacd55a257adedbb23779e460add50e54e", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787305531, "uuid": "8dee6d0f-7ac5-432b-8cc7-75e096d794aa", "value": "T181211091A464507386ED0ED12E03AD24330F94F21E88D7CB7476497DA822A6AE3793", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787305531, "uuid": "14f02856-035e-4cee-b27c-7364a6866913", "value": "24:AcuVrY1uNQ5iZpyZwMvXA051A4HVpG3BkCFuVM5GOD8A4no0k8vC7zPxjuD5lnAT:zuyaIssXlTH+kauXBvktzPKN0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787305531, "uuid": "e5be6bb2-f2f3-4029-85fc-84e0f1e1f0c7", "value": 1243, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787305531, "uuid": "12e4ede9-fc71-4867-a10e-53c5e92e7c2f", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "524cd97c-9d4b-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787308225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "1ec10143-a3c3-45e8-aadf-3dc567247542", "comment": "Malware payload (Mirai)", "value": "cecb6ac0055e1c85c4fac2b883ef9c8b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "eabca916-f674-4df1-a31f-e7ff2a5575de", "comment": "Malware payload (Mirai)", "value": "76c69eeb500f8652bcf82269e7415a10c9f2e3206e1ebecfdadd478fd6b527b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "473b758d-61ac-4e69-b683-a3e8b1085cd1", "value": "T1254302D31672D1FCE9B70B7286780EA1E9D9E7236022036D1EE866F141BBE0949707", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "e6f9c0a7-7f5c-4b2e-ab82-38443aeab4b8", "value": "1536:aJ01Y1fkRAELg8YXYAEsOscxUxKUhYwwauDf5U:9EOL3rxKhhYwwauDf5U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787308225, "uuid": "fea59568-445d-4e91-a552-a905c29c38d4", "value": 57056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "0d3a1022-9fcc-454e-a84b-e61f4d450dcd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "524d4933-9d4b-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787308225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "9ee6193f-c7ca-4c82-9714-b80404f231c9", "comment": "Malware payload (Mirai)", "value": "14f79db51a1fd65d313a58a057d39867", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "7be7bcdc-11de-4783-b34d-d9922b0d4797", "comment": "Malware payload (Mirai)", "value": "54d08acac87f7b50b4aca64be345b520d03f00818b8288fbfa4034d1bffe5800", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "d59df96f-2378-4308-83aa-7ae40fddb26d", "value": "T1854302193753513FE6FEB470DC6A85C7B2419AB0C09F30AB3EE057026D622DF22B64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "912185b0-2ee8-442c-b18d-7dafe9979622", "value": "1536:HHvBayq/4qyC7BARGrA0ucbPQiGpb4r9PzRnALjw:xk4qyCdAgvPCWZ9ALjw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787308225, "uuid": "37ff4bcc-2289-4a26-ad00-d6a3ac40d9b4", "value": 58148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "91152f84-52fb-4487-84cf-04a993197a31", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5255bba7-9d4b-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787308225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "faeac7fb-ec53-4e14-b14e-3fb59c82351a", "comment": "Malware payload (Mirai)", "value": "e342faf268e2d699c86ddcbf4b39b3eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "c14baed1-1ade-4206-9816-cbd463ebf534", "comment": "Malware payload (Mirai)", "value": "b57122deeb0d9a4a2d8cbff684303254b039a6dabe3e9bcb1b077378376a73cc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "a6ed8863-8694-419b-81ee-746801b17074", "value": "T10443022D842901E8D9B1C5790E840372BB258A746E1FF84EF1CDE21F29945773843A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "7cf79c8d-9bdc-4564-8e52-30197268e002", "value": "1536:oezmIhv2CueFdSSiRSBKXlEScOSa2x22W+ixjaVJu+:oeSFBadcSoXHcOS/22zitaVQ+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787308225, "uuid": "c388f03a-aad5-4034-8108-dd9a2e6d6955", "value": 58168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "e42ed4df-7bd7-46c0-b544-6de073138cdf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52684844-9d4b-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787308225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "e0075cc5-2576-4f5f-b821-da01c1370eea", "comment": "Malware payload (Mirai)", "value": "c2fa8a8c9fe95d197c4b71c0be731557", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "53f18cab-e3aa-4719-940d-4949670282c9", "comment": "Malware payload (Mirai)", "value": "49ec1951b01bedae3a97bd3109656aab80b14a60544205cd4c9eb243a3635023", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "18f4fdf7-b2a8-4f88-aa16-93c15debb816", "value": "T12BD35A22CC655E6CD166E970B038DFBA1B13D592814B6EBE28A7C2710443E9DF942B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "e6bb99e1-38d7-4618-ac2d-3186125d924c", "value": "3072:UpvkWzB7iBDnwayUkT+7boFoWmqmkNkM:cDBADwayBTUixmj4kM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787308225, "uuid": "66aa511c-633b-4922-9366-d413710a9bc0", "value": 133988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "cb32b1c9-fe53-4be9-8c2e-b3bbb0cc7318", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "526aa043-9d4b-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787308225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "acfc70f3-13b5-4aeb-975a-64e0100df091", "comment": "Malware payload (Mirai)", "value": "a3e63088ca8844c311a02c904cb76a6d", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "94668f4f-2c1f-4fc5-9314-d4c127491a7b", "comment": "Malware payload (Mirai)", "value": "65150332a09a957c811ab774f08db876e51c8b1c0d146c3762d6aaaa5824ac9a", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "1a85e7de-0125-47ce-bd0b-fb9038fe1556", "value": "T139B3AE9BF24755A0C8A246F04BDB9F9E3E2363C04F4B59FB7C6D563A99710EB0910B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "6bbd80f5-322c-4f53-babb-632d87b394f6", "value": "1536:0fFkLMBe0z8vIOpVMFn6RbclcX3F+Ql1gvso/LWO:TLQDwvIOpVMp4cgF+QDgvxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787308225, "uuid": "bfee8a05-fc88-45e9-8fa6-bd38af886094", "value": 116248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "d0847102-1485-4883-aa6d-065819359148", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "526ba003-9d4b-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787308225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "c9dd288d-9f91-4578-891b-bcb308d5fc0a", "comment": "Malware payload (Mirai)", "value": "84c1ea70c4e77471442dc9ae357b7161", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "7901abfb-adf4-40de-b753-92bf1cdc6b43", "comment": "Malware payload (Mirai)", "value": "817559ce29dfb8b58c91a0b6eced8ce643de8d140a8b714ea85dbf05330d99c6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "a4d1a50c-da39-40f9-a556-afcca8d5dd3e", "value": "T11F111FFD7093B713EBA58D0AF160A634721BE2EDA5CF198CF8CC64A3DC46550B52BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "341e4992-1006-4835-b970-efaed94886c5", "value": "24:5X6RBCCppBGCmBxhpLBs0pGBFBp/BEU4BjDGMUuLFrKRzKO:4CCpOCmhpi0p2BpaUGGMUuLFrKRzKO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787308225, "uuid": "c5bf7c24-b141-4c25-acaf-a4265e1125f2", "value": 1095, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "e94c71c6-bf62-4ddf-b215-fdd6f73f0548", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "526d5727-9d4b-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787308225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "4173c041-66e0-426b-900c-7630524b1fe7", "comment": "Malware payload (Mirai)", "value": "e28d3fffed19b80e95127a739d7aec3c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "5ef2afcb-7d3a-4039-90e3-e0f276ffdd2e", "comment": "Malware payload (Mirai)", "value": "20ae8334d28f9428775b88bb675f07fae271cadd13f3a2285d82118203ae5339", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "b3c20602-f1bb-437e-8bde-4c001743a788", "value": "T1BBF2E164A2700F48D14DE171186BB65A4019EAAD9CCD8ABF57DD547F0E6DF423C2CE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "46e7e820-d467-419e-87bf-40cea2bee231", "value": "768:IRT8CJJ7Mx7fLFo10ZMqCRrZYVY8ykT1enhkprIogFZOinbcuyD7UkWykkAk:iS+jFaprIo2nouy8kzkkN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787308225, "uuid": "d030ab7e-ff48-437b-9e08-49dbbf346149", "value": 35200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "3055a9f6-28be-457e-a560-16e1542f42d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "526d7542-9d4b-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787308225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "8ba1b205-fcc3-43af-b888-64ba74b0ad44", "comment": "Malware payload (Mirai)", "value": "21578b6067b2652816efbb42a9d56d22", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "ff611ee6-bea3-4c8e-ab81-27dbe23198c8", "comment": "Malware payload (Mirai)", "value": "2317a73814d8e77d392377e7779963a10e283e50bb66a4d7428e833560d62292", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "102cc8fc-f0d5-48a0-9d31-321f62c964c8", "value": "T19433023266F2E722D4F259BFFFA54072775666FCA1BC3A103ABC2D6036CA24653641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "e745f834-c6bd-4f92-9902-2946896a9fa4", "value": "768:Zl8ovWgrANiL+SsHum8asOlJfyeBCsdAanUu93r51PaCGQCYM5XshMilypJDZ2sW:Z+5NYmr7yuCsdAE33jPamwcGileDZbzc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787308225, "uuid": "c251eded-696e-41fc-a7d2-f982183ac508", "value": 53632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "a083b824-1f31-4a15-a623-5fdb35e67bc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52704cc7-9d4b-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787308225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "f32146c1-f8a4-4fc3-8f8c-891478cfbdd7", "comment": "Malware payload (Mirai)", "value": "3e3464b206c94a1e4b85ffa0fba34301", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "19eaf07b-68ca-4bc7-8b38-34d9114fcb41", "comment": "Malware payload (Mirai)", "value": "c9a3aec22b3c8448f043f5a4b1d81d1a6b2bc6ecff8941ac2c970af7e9321612", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "cf7ed2ee-3d71-437a-9ff7-376037d956d3", "value": "T12433F715EE785B2BC1D0323658D74A31E9B253D917A89A8FBEB32C099D54320313EE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "cbe898d8-2f31-4156-af9d-8685cf856972", "value": "768:OFuJ3W48DojszUVSPXTqF5UY7oNt0LonEmCaF32kCCCw5FK:OAJ3B8DE5aeF5Xct00EmCaF38Cr5FK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787308225, "uuid": "7c8df054-725d-48a0-a8cb-643bdd3c6a80", "value": 51624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "11173b57-8996-4cbf-be3b-80d01f3953ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5270cb07-9d4b-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787308225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "5baaa2c3-de59-426c-b8eb-5114009e7cb7", "comment": "Malware payload (Mirai)", "value": "65aa6240ab638586c629982b6acef078", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "b5eef4fc-da5a-425c-83cd-1c95147e6eeb", "comment": "Malware payload (Mirai)", "value": "fb6f3d44134e4cb65cc2d39facdf2828ff616300730c606ced0f97ceb6256961", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "cbaf1c4a-57c6-4091-9554-fd4eafb71adf", "value": "T1664302EE3DD02960CDBE4C75D0AD7BE8C42266F25B855FCD920309CA534EA82F96C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "81d0b62b-96d7-48c8-89aa-d971bc143190", "value": "1536:iBzSafigucDMdRLUb/9eXzC6k9Yy0q1j2:ipS8igpIdRLUbV76Iuq1j2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787308225, "uuid": "c66e10ee-ee63-421f-b907-9dfaab888271", "value": 60184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "2d5eb919-768a-459d-a211-c265fb60e208", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5278dd1c-9d4b-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787308225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "fe6e8ef2-6c50-452e-b43e-dd5e2b3e4b44", "comment": "Malware payload (Mirai)", "value": "06a93f272cf727393e956c3580ece8be", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "3d3e0257-489a-491a-a185-21931ebb4d25", "comment": "Malware payload (Mirai)", "value": "79e9dcbf77ac811c7cf2a02bc9bc1ddd6c429d3b3aac9ca5c6991332c9e17f81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "f390ac5b-6bcd-4757-8800-d060c35b52c1", "value": "T1BDF318D7F800CEBEF41BA336885709057130B7E145826B377257796BED3E1A91863E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "21ac5fc1-2eda-4782-9284-277819537f83", "value": "3072:4FiAPohRTkmN4CA8RzyVAE9C2VsjbiuLNRIydab15:DzKCA8VyZ9C1Lkydi15", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787308225, "uuid": "954ca829-90c5-44c7-970c-12bf7d744c3b", "value": 162944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308225, "uuid": "7cde9b4a-1943-46bd-bb4b-189d8b775b9b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f12a7d8-9d4b-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787308273, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308273, "uuid": "9e3998b6-a6aa-43fc-a0cf-4ea92d2ae3db", "comment": "Malware payload (Mirai)", "value": "eb70da94d19911566d812246856244dc", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308273, "uuid": "836a5197-8496-47c5-a4fa-add0753fd31d", "comment": "Malware payload (Mirai)", "value": "d2a77379aaaa70df30b91faa88f65a542973bd04ea8c90140139d3ef34ad184e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308273, "uuid": "4da16115-1ae4-4515-98a9-c60340093c58", "value": "T18C13F16749746EB3D5F009B1A9F996C6F8C11BFCE0D9081319988AC0DBD4849B9FC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308273, "uuid": "9dab61fc-2fc1-4350-8c52-820a2481975f", "value": "768:dIUuDX4C7e22zJmtnGCfuA3OKsMeb3/W87SQ1wMaVJwduv9q3UELCYd:eDIj22zedf1+CebvW87SQ1N/bLT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787308273, "uuid": "ff2e55f5-2259-49fd-a1cf-1e896590e828", "value": 42744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308273, "uuid": "3282a949-504d-4d6a-b572-a3672ca3469c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ffb9d28-9d4b-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787308275, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308275, "uuid": "512d75b7-a7a7-4396-9272-7a83409712f4", "comment": "Malware payload (Mirai)", "value": "11b4d20422f61e7a5c683ce8fa4896ed", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308275, "uuid": "355ac20f-fb9e-49d4-90d6-7f7abebc5de9", "comment": "Malware payload (Mirai)", "value": "0088148d6f726d00c3a46ea821e313615f11ad08e553f2081c3e0cd0ac06cfb5", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308275, "uuid": "73c0610f-0bcd-47de-b303-f8e24b198878", "value": "T1B433F170B785DAD0D7B055309AA8CAD2CCAF25BAD1BCB0B9285831E3B59740B31762", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308275, "uuid": "83f35254-97d3-41b5-b88b-13c24330a56d", "value": "768:mnAvJxdel1519U3AePobIu7iOeGtDUY1Eegv1ueSVuX5Zb6xEvWoNVrA4Ipm86kw:2hIAlIKtJSo7UeAVNVM4+m8AF2yzj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787308275, "uuid": "46c80994-d099-47b3-a69c-2a0803fb2635", "value": 52176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308275, "uuid": "d9fc6650-743f-4627-9150-d98781414374", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70cad663-9d4b-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787308276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308276, "uuid": "9e6bf920-254a-4225-b895-3a4452cb0b45", "comment": "Malware payload (Mirai)", "value": "b845c23eb1f426c63bf0e397ec8e6663", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308276, "uuid": "da9d3573-bd20-4f66-af53-1e7411c74d72", "comment": "Malware payload (Mirai)", "value": "13e78d65622ab95d3bb38ba19d8b02fa00565c26d6a9081ffd81c0170c21b814", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308276, "uuid": "826f40f1-b4dd-4837-962e-ca48e53b637d", "value": "T13033F160C8C738DBEFD39AB4ADC5CCED9B5DC65A14C859E161CC1622A72F035AA18E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308276, "uuid": "7451864f-2a13-4481-be51-58e191a5f720", "value": "1536:P03s7EkCM6AqK3OPWCZX0A2aNenYmGGd4u+qgw09V:P0KqK5IP3AnVGs4u+qgwg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787308276, "uuid": "50e59690-cd27-4abb-bd9e-593d5437115f", "value": 53056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308276, "uuid": "34d9ff39-cb08-4c98-b436-f918bd44d88d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "724c5582-9d51-11f1-8686-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1787310856, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787310856, "uuid": "409dcf9e-ca24-4813-9fa9-f6d5d442e82c", "comment": "Malware payload (ConnectWise)", "value": "44b2d61d23b8d0e0517ec156cf952a39", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787310856, "uuid": "4c7e2abf-136a-451b-a0d2-bc5fff753cb9", "comment": "Malware payload (ConnectWise)", "value": "692dcba99a344de1a72c4f9241bd26197c1cf1b6bcd97fbcfea26785dd13edb6", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787310856, "uuid": "89a2156b-888b-4b86-917d-cc8f0de8920f", "value": "T150D61211B3D6A5B6D0BF0639D87982A55675BC058B62C6EF53D4B92C2D32BC08E323", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787310856, "uuid": "07964d54-cf77-474b-b427-445e46c413a2", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787310856, "uuid": "2e901db0-ab03-4222-9f78-faf18d6c8d8e", "value": "393216:l2xiFxbwpahCl2xiFxbwpaD2xiFxbwpaq2xiFxbwpaN:MUFxMpsCMUFxMpxUFxMpUUFxMpO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787310856, "uuid": "ee2f77df-6534-4a0e-b888-1e035587acc5", "value": 12809272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787310856, "uuid": "52f0685e-c1b7-40d6-9e4e-95a08a9bab6a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a2679af-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "86afc90a-2c6d-450b-b11c-c9f35abb188c", "comment": "Malware payload (Mirai)", "value": "a5acdd5a9965042ffe807fe8b1a32347", "object_relation": "md5", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "2a7d54f7-8f96-4c45-9091-ca10172a8622", "comment": "Malware payload (Mirai)", "value": "61c38e7b0dfd27215de74d42d2f1b4bd52385782cd084947e74f858cef6acd30", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "04f2a7f5-4446-4c95-ad24-957142ca6190", "value": "T194457D466372CF8CF354E67002B39A165EA611B326E361C6A2BDD620376125D1CAFF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "b29eac35-51ea-4190-81d2-ee4254e014cb", "value": "24576:kFA4PnlJDrgxiDD8sLF4yEG30uy0fh2XzBfTR:OA4nrFDb4yl0u/C9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311701, "uuid": "63c48751-eddf-4653-8c3c-8e84639e22f1", "value": 1190368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "bf145522-5db4-432b-8527-7a50026defed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a303abe-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "a61b7de3-bbe2-4a11-b19d-af699bf9766f", "comment": "Malware payload (Mirai)", "value": "85d36afd05c548dd97274b29055f9537", "object_relation": "md5", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "fa158cff-c4dc-42fd-8c5c-3844803bd193", "comment": "Malware payload (Mirai)", "value": "537e61953105db7e50e1474925df2c0146105846f565b73eb88e2950c7fafd1d", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "f3d23ed7-ab93-4b4b-9e45-6c642f876e92", "value": "T1CC254B88F4E0EB96C2C4A9B5F71D695C33130735E2EB710699299B3137EB45B0F7AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "8dbd09a5-65f4-4fac-8360-e063d8bd8aa3", "value": "12288:0l//0Ngd0Arc+AN9V+JHVSUyxMgE8R8EExNogAAb3jIAiiCWFa9BhgptA0o:0lBiAcfN9V+JvEMKgpAATjIZiFs8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311701, "uuid": "8766f31b-ab79-40cc-b889-80555ed1ec29", "value": 964056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "0d7e7212-92a3-44c5-a7c8-e4f26e2997d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a32ab3c-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "6bed0d23-98e0-4ca1-b59f-6840045f5d96", "comment": "Malware payload (Mirai)", "value": "a57c9da240f226c7e5787e67fcffcbe8", "object_relation": "md5", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "81d248ec-96e0-4736-800c-dd3a7ad9d08d", "comment": "Malware payload (Mirai)", "value": "9ac01e9af776b1c1a4c50bab9d1b9cadc6a221fbe6ebfeadabea5dfaf4c60666", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "b1064ff2-af2c-4bd4-8af4-fc2b218887f4", "value": "T1AE457B05DF901FDFD0AFCE30462E960B08ED4DA722C7B6B560BC8859B39A2494FD79", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "2248bd32-0a00-47c3-ac81-9a00c9befd28", "value": "24576:Dvpr+T27NWYq+fEJxcKg3jnwp5sUWFD2:w6wYmi6TG4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311701, "uuid": "6015c717-c38b-4ccd-bc59-5ce8ced40fbb", "value": 1190368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "f7f2999a-55e5-4e46-8772-319f6905ccf9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a365a02-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "82764687-c74e-4093-9a46-7caa67bcefd5", "comment": "Malware payload (Mirai)", "value": "c7776f2bb18f70120c62eeb6beb5cea5", "object_relation": "md5", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "ffb3c755-d9e7-461d-8d4c-af320c499f4c", "comment": "Malware payload (Mirai)", "value": "46f8a4171fe84029634000f10835d0dac1fa2352fa7613d60a3c7e48af9fea8d", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "7f4a8e58-0a94-4c78-a453-53f2c9dff4f0", "value": "T180456BC8E3E3D1F5F25385B0034FABA71D7052266053FAE6E78D6A6371733521A5A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "3fb161e0-2c47-4688-abaa-58c5e5c90846", "value": "24576:ksdjPjFyhA5hVHgXbHZlTN1qyiRdgmVdAHmR+MEA1J:jxAhA5hqPzXib/VKCJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311701, "uuid": "e12d06a6-0ec8-4562-9406-3684c6504d7a", "value": 1238464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "109ae7ee-78b0-479e-924b-625e5f8f66fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a44d827-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "2b13825c-9ac5-4ad2-b95a-633cd947bd26", "comment": "Malware payload (Mirai)", "value": "35bd3596b18d0cf5c1313fc157c4b055", "object_relation": "md5", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "2173218a-ca16-4553-b46e-1385d1a61ecc", "comment": "Malware payload (Mirai)", "value": "4f49e6e001ac5d606022adb8f26232894cbf970844848a9d8e7ed55231e1a8b4", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "2469954d-a71f-4dfa-b5e7-3e7c970ec85c", "value": "T11DF49FC8E2F2E7CEE199E9355301BC064D66853730E37385725FA6B3326A1744FE9A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "d0c03eae-b471-439b-be5d-ecc3abe979e5", "value": "12288:njLeS4fKEWWHdNVdK5LNKDPw2uGoODj1WEVMTGa9SgpPLpWA:jLxrWH7VILNqHjODvz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311701, "uuid": "a344d953-bcc6-4aee-b3ae-6eaee3a7e0a0", "value": 730932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "21be8730-a365-45ce-896f-22aeb15dcb8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a481b0e-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "b4ec0753-a946-462c-8e9a-8eb7ab76249b", "comment": "Malware payload (Mirai)", "value": "85a359706e181debb51496ad9386057e", "object_relation": "md5", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "ef8bacf8-66d1-465d-9541-59b2ff2b4f35", "comment": "Malware payload (Mirai)", "value": "fe65712c1fe99be5af0575ad9106d3d7c37fb92b688716795e44fbcf08e591d2", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "14ef2d31-8cbf-479d-845d-2879cb1e0878", "value": "T1B215AF95D2B0E7DDD118CAB06169F9384F22A73332C371C1B2AE855312B72A579EDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "17d4b6b3-ea29-4d71-8f66-da2940c8b176", "value": "12288:MtkJiHpPM+kWuU2DvQZa+svaOd+O7J/fZsHG5aJV7arC/1f6QwCBfQp9y6a9YX:MLFuUFoNaOd3lZKZ7ra", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311701, "uuid": "56fee303-87e8-4a7a-9c55-359190753ac3", "value": 922416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "903fcd9f-4ab3-4cb0-8018-f9900615472f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a49ebeb-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "6f068d80-592e-4f0e-b8a7-9daf691d45b6", "comment": "Malware payload (Mirai)", "value": "358757416854f7138aa8f45a5e24221f", "object_relation": "md5", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "c4a1bc97-296f-458f-a9fc-9c2cb00ec3c3", "comment": "Malware payload (Mirai)", "value": "c3b4101d7ac42e016bccb26c376688bb1f36681a4485246b5453c4c371401af5", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "6e99ffc5-12c3-4d3b-8bbf-d51435056f0c", "value": "T1CB456D19A2F2F1FCD15BC034539BD9625931B07635333D6B32C9EA322A76DA113A9B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "a4ddec08-ade5-452a-a691-a72c6afd6af4", "value": "24576:yZFVvhENgQgkbFEJsMgc4eBMBOafNSH6hlnh:yP/ENgKmiMgneBM94Eh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311701, "uuid": "22d41104-b818-4ad0-b154-99b88988838d", "value": 1273176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "9d8c6218-7078-4ac2-831f-038f9b824409", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a5ab452-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "53550e5f-538c-4680-845c-4f8e7f317330", "comment": "Malware payload (Mirai)", "value": "cc6c374af3457fb8b7501deae981517f", "object_relation": "md5", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "bb0128c4-348b-4d34-97da-d04733c0f759", "comment": "Malware payload (Mirai)", "value": "2470e35d9a7feb646476e70cea874c54fc32f6b12c30f3d648c1ee3b1be7e59d", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "f525057c-ebfc-493a-aad8-5ea299f7b40f", "value": "T1B9259F8CE96EBDC6F3CAF3789B0D97A1A52B7171E26360A33547534E81D61D4CAF09", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "5e7c9fc8-861b-4587-9186-b47dc382e2c8", "value": "12288:6UbBeR/YKL02jesRv+jcM5Si9GU6qWDTPWRsHrkaEJ8WufGECVL0+a9rw57P69:tig4RjbScSSIl9W/2gtEKGp0rV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311701, "uuid": "6a52becb-9318-475b-a17b-cac309bae414", "value": 1057504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "a2a9b024-35dd-49a4-a659-7dcc1a85e71d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a5f9d38-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "185cf923-0fb9-4367-bd5c-9b9ac4ee09c7", "comment": "Malware payload (Mirai)", "value": "ce425a7a3e72b5744272726cce271203", "object_relation": "md5", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "f3867ba1-d9d4-4507-a31e-5addc9af04f8", "comment": "Malware payload (Mirai)", "value": "87a832effd8e8892984216c1b12bcaee8ef58350e11b27b8a2b873c9e71fa2a3", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "0013e35b-c0b3-4ac7-856e-834c6a8acbb3", "value": "T16F458D05F72886A3D5425DF0173F57C6F7256A1310FAA22A330FAB232372A3A95C77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "70d8cf0c-8073-46e7-9918-42f54c977839", "value": "24576:BBZLEovfgVwg0QuYo0ZBIHcuUhNPkjNBR5xKH8o4vSyMV:pLEovfgVHuYoYIRsNPkRBR5q8vSym", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311701, "uuid": "65cc8832-b64d-4103-b3a0-747e12bc1ced", "value": 1250464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311701, "uuid": "0c48b281-a4a3-42a2-9994-35cecf03089b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b40e246d-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "c830c67d-a542-4a46-abfd-c83b030eecfe", "comment": "Malware payload (Mirai)", "value": "706dab50e0e459d9607b2e6860301f18", "object_relation": "md5", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "cb40cfab-3f03-4052-aa3f-e7a49f24457c", "comment": "Malware payload (Mirai)", "value": "7f6abc496e175ebd6d619451dd529fdcfeb17836a8bc53d1614aa91705e9a671", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "f899cea8-2d22-45c7-96f9-23337496fef5", "value": "T13E2302BCC9B03EABC4B41AFE17D63E748E4192C0B29D41045710A9CCFB692D97E8F0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "9d3c45be-8c9e-4fdf-99c4-6b156e9afa10", "value": "768:ihPQfMV0RWKquklIB8UvKsg/wqlbJrL4Y8J52fITkYGIykQ6WH3t1WUy:2q3x3Ue82g/3iYg5mITkYGFVDHdpy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311825, "uuid": "c78cb737-606f-447a-b7c4-a7d3d3566fd1", "value": 46880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "9fa11f20-562e-489a-801b-c320a80de924", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b42a75ae-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "0f6c89d9-260e-4bf5-aa9d-a14c77cc7d04", "comment": "Malware payload (Mirai)", "value": "03747017650ce8fa7e12829bc0ce9743", "object_relation": "md5", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "7c6b11c3-b7dc-4095-a20e-f20ba42573c4", "comment": "Malware payload (Mirai)", "value": "00660f4fff4ca116abf4c18312685c38d50f11bc5410a77c87e90ce1ef4cd1cd", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "5fa82ad1-da0c-4a5a-b81d-45f71d084d86", "value": "T1DE13F271F9E51236CF7F2AB36F2987833BD95BC63621CDD02090BB11A817466661E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "10ee5206-c7dc-4220-ae93-2823fe35be35", "value": "768:Pcrv5pqU1FfJglUSM24UNeH8VN7kBugMCeYLX6CMXtaR2tt4uVcqgw09e:U+U7pSr4U4jugMKBMXtawv4u+qgw09e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311825, "uuid": "56cbecda-3a4c-4ae3-af68-153ad311f1bd", "value": 42360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "3ccd6fdd-032d-40df-a3c5-671fd3597527", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b42ad62a-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "3aa9ff1a-4a29-497c-8669-1dd940bc2541", "comment": "Malware payload (Mirai)", "value": "1a78505d7605df48e09c66464164f780", "object_relation": "md5", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "56f1ec1e-4d1c-4883-b45e-4b90c655def5", "comment": "Malware payload (Mirai)", "value": "e59221216f46ce2ccb4e3102e109e4522744c2f83bfb5fcd82911420b18c07f1", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "46a5fd69-0995-4d9d-947d-1b59d13f6938", "value": "T12A630244F7179ED89B242E3BF5048EC4098B9BBC9D90B11113FDA28D57BB455ABA08", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "93538bfb-80af-4d30-b434-20fd97dbd246", "value": "1536:gx/gwf3xiu67lkJ4F6dp7ShWEfm+DxA/bWOLK6PUhMOFQk:g1gw/JiaJUWEfdSbWOLI2k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311825, "uuid": "ee5a809a-046a-4787-b57c-04bf0a2f4d98", "value": 68940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "d7fa6893-1316-4df1-9038-557504806adb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b42d3e18-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "0a1271ea-15d1-43a5-8c64-cb908704f942", "comment": "Malware payload (Mirai)", "value": "2ed5761b0f5596ee75573a8cce7b769b", "object_relation": "md5", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "9ee3793a-a11a-4930-aaca-5e64b6d7faac", "comment": "Malware payload (Mirai)", "value": "017b90428f16fb8e760b958459463f6cd99109553ebfafe7b9192be9fb531ace", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "7db47eb8-0492-4bd7-a42c-4904d3160dcc", "value": "T1D4839D7AE9266E60C18589B074F5CF761B53A6C082931FBB26E1CA7450C7D9CF406B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "9ef929e7-1643-480d-866f-c0fea42dddca", "value": "1536:FavCNhWup4f3DnlnC6ywKRKRZ1J7ZHcUDtC+fbhbdM2f:F3YA4fTdC5wK4RZRcUDtFFJM6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311825, "uuid": "a3e99008-f5a3-4f5c-8ebc-237d253e13dd", "value": 83532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "3774fdb5-9c19-4f3a-9d38-a300fb8757ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b42ec830-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "a6a30fe9-d041-4d71-b607-2fe8f0ce0d2c", "comment": "Malware payload (Mirai)", "value": "3ccb5bd59c721ee633601969e1246a7c", "object_relation": "md5", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "6cd4598f-1a79-4ce5-a291-ffe401f84132", "comment": "Malware payload (Mirai)", "value": "3eddc12d4ba25b88cb0959661c4e90ffe89179c9f5cac591bdd00505536d378f", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "7139ae00-4faf-4b83-8af4-83ab6a531876", "value": "T1F423F25325285912D4B48D78C57189CBAF069FBE46F7F4AB7668E8DC933B08406ACB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "c4b40cb5-b196-4e61-a27c-c248a1ff0edb", "value": "768:zuVtDyq3zyzvXVx+sxSZ6+h80tmLbfh/lxidPHIl1Loq/1xgH9q3UELHr:iVtmqEbU+fR6JHGcq/1iWLL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311825, "uuid": "781b2047-b7f4-40a9-b0b8-14933871e83f", "value": 46256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "80a25ccf-41f2-401d-a5b9-660dbee53daa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b430c599-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "db8384bd-364d-48db-b458-9746c4406443", "comment": "Malware payload (Mirai)", "value": "8b4ed9da4cbd7607fa6f515cde227958", "object_relation": "md5", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "100a533b-9295-43a6-983f-f4b5d43c7eef", "comment": "Malware payload (Mirai)", "value": "41706690e2f754a3de915aa1e2e80b7cefbd77eaba0968cb4e02b3d39556da1c", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "b9ed06aa-f6b0-4fc9-be17-96b2d5fae508", "value": "T13713F173F30EBC86F5B24875DF680141E5AB8E64BAF4B8215FA92616F85E8C10CAC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "28fad4ff-53e8-4d32-8c7f-db784c2a270b", "value": "768:GADrYHwsjq/2IXOngibxnQ3xz22+0pvttJU939whrroJ15RHZMJE/s3Uoze:GuEHwsjDzb8xzJvFcLCoJ15zQze", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311825, "uuid": "1896a55c-d7d3-4c08-b029-a5b7409dfba5", "value": 43172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "e3ab225a-80c9-4eed-b61f-2de5a0f8fd28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b431a65d-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "9f0b997e-7637-4498-9d96-4c202dc86621", "comment": "Malware payload (Mirai)", "value": "8268abbb402e7081c1545056e1730f2d", "object_relation": "md5", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "13200b95-7f81-40d2-8011-5c11a8338427", "comment": "Malware payload (Mirai)", "value": "9b1f88a9438254cf36932cf0ab696411ac2891c698f9d98da65569178702a0dd", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "878f623e-2b59-4e47-af8b-2f91ee5bb661", "value": "T1F4D3ADDBF38B05A1C86201F003CB4F9E6E6321925E5BC5E77C29B63B6E750DB0906B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "4eca56cb-c55f-49ae-a571-d7816b5b4db7", "value": "1536:6iz99IUzLazQGCHraz/HuB8/gWTVtlu1J+YgEx6UUgnJDq+/LWi:x7P6znCHrM/HW84WT36+Ygrgn0+q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311825, "uuid": "6a190faf-2439-4aaa-a6e1-7090c12e0896", "value": 132648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "23e9bc52-3a56-445a-9f76-6bbc41b3b447", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b43267aa-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "09d5b456-ca5d-4699-b6f5-37d32cfbaea0", "comment": "Malware payload (Mirai)", "value": "6f48274be0ded2cc6d2ae25b55b3e8d6", "object_relation": "md5", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "53409be2-2184-4c50-a287-573b93766bb6", "comment": "Malware payload (Mirai)", "value": "333caf31043232e8926dec9583f0791b099c13adef2ac6378d20600806dbfe56", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "78300627-c935-424d-8726-8e496ec8371d", "value": "T1F823F164620641F1D59CE8331EF5ABE26F621B71F013DC6D7CCED692A8944AB3A03B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "3cceade8-55dd-4d18-bc7a-61d6d705a4d6", "value": "768:rw3Q81m/STZ2q/LqGxP2nvH5kmYikrFM084IG0Gm+xNRG3JgGlzDpbuR1Jpk:rw3Q8E/ipP2nP5wpWQjG1VJuY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311825, "uuid": "84b3ccbb-b881-4597-9201-1038e38c6160", "value": 45568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "33bf7673-be4d-41d6-8b52-3111840bfdd4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b438590e-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "13a9c52a-26fd-4bb8-bd3f-8ade9a2c33f0", "comment": "Malware payload (Mirai)", "value": "f63cf14ad0bc3a4bc95154790aed9858", "object_relation": "md5", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "2e499132-e5e2-42d3-bdcd-909ff885e44d", "comment": "Malware payload (Mirai)", "value": "e89f17f8be26a14dbe2c4581f253c96f16027e5914699fb9f317aa8d23ccbeb8", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "3bdbd681-a334-49bc-bf88-2ca062a4b119", "value": "T1A7A34AD7F840CDBEF80BD77B48970A0AB570A3D146831F366367B967EC361951862E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "0e9d6bd5-6fb3-48d6-b5f8-5527a4a8b0d3", "value": "3072:YsMBy+XYzglVtgGwYy2D/WISgHj9Mvh7BDl9f:F+X2Gy2jWISgD9IBDl9f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311825, "uuid": "6f416820-c628-4221-b4e3-d8c6126bf305", "value": 101120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311825, "uuid": "c1c129fa-8689-4950-be34-253d2b4983ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2ce3197-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311876, "uuid": "2b16c48a-f990-4052-9bce-fffeb26662cc", "comment": "Malware payload (Mirai)", "value": "97fc773da62945d2df26a772fdbf614e", "object_relation": "md5", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311876, "uuid": "cd3412a3-9d21-4dd4-857a-b5aa800886e5", "comment": "Malware payload (Mirai)", "value": "2f882761d92c89e7d7a3636e94b152c27e50d379836cb2664bd06728f2b5699f", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311876, "uuid": "88c5a19d-ba29-4750-8804-c05aa04d8757", "value": "T130933A22BA751E27C4C0A47A21F74725F6F247CA26AC891B7D720D9DAF246403257F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311876, "uuid": "d59bf8ac-e449-4cb2-9ea7-3a05f5690b62", "value": "1536:T0GSBQVM7vEOJV9kKFdS0NNbvvsoLHltA7N+S52ESdgQgvDDtzFCwM:TYSVMLloA3rlK7NV2ESbADM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311876, "uuid": "dc615ccb-7351-4131-8ac8-86394dbe696c", "value": 97056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311876, "uuid": "9a66709d-3767-4d03-8388-ab4355d70791", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d40688b7-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787311879, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311879, "uuid": "7ef9dfd1-4054-4828-8131-5a3c0249730f", "comment": "Malware payload (Mirai)", "value": "bebe61b3d71cf41749837d60eea581a3", "object_relation": "md5", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311879, "uuid": "de4b4f8a-0d2e-40dc-82b6-87d7a8fff46e", "comment": "Malware payload (Mirai)", "value": "d4446a18ed3cf07b01d414058ef04541a5a150dec285173f944861de99e2102b", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311879, "uuid": "5110f72d-2b81-420b-a850-f71233eacde3", "value": "T192B2D06B07152971C9304E37D6BD940625A20BECC4EB72B26828173CEDD750B15F45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311879, "uuid": "5a947bc4-421e-4340-a1e2-6b92a1f127c1", "value": "384:NP4aVKT5Qmd+VjTgQrYn1NGKfqKYxNVp1E5MwG1thymdGUop5h/okn:RKKU+V4QsDGKcV7EU1ts3UozOkn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787311879, "uuid": "5d0ed501-e373-4911-823d-1882aaee62b3", "value": 25712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311879, "uuid": "9af1387e-727f-4be6-8db2-d96ecf4a0326", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6862e634-9d54-11f1-8686-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1787312127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312127, "uuid": "dea70751-d2c6-4ea7-a42c-2f2d4dfaea12", "comment": "Malware payload (DDoSAgent)", "value": "96232555514dc5d2b8c7b72689b130c4", "object_relation": "md5", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312127, "uuid": "4f1ddcc9-806a-4fc5-986c-deb2b1289fb4", "comment": "Malware payload (DDoSAgent)", "value": "436b403129995713a85b63f28fe06f8cd8dad80c7114b9733839216e12b481b1", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312127, "uuid": "2f5b8ee4-2039-4d21-99df-596636b298d3", "value": "T156768E91FB48A125E9470A7288630F70B7611D86C1E58E6F4309F72F06B1AFB5A5FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312127, "uuid": "57840651-f63a-442c-99f8-f4b2ff53c692", "value": "49152:0UflVQTL79cO6MJEBDpo5ur3xsvNYcaMBDeHPff3I+dN6MHHIt5Ea:frQTP9gMElp6uLmxaM0P3IoDnIjEa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787312127, "uuid": "77fb4055-bfa6-4ab8-8745-dee543514860", "value": 7536802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312127, "uuid": "305ad3ea-2322-4fd5-8112-a12718a53ed7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "687e671d-9d54-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787312128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "b0a66b3a-9405-46a0-81a4-ac28942af69c", "comment": "Malware payload (Mirai)", "value": "8d79c93e8460360b7f857eb0f1192bd3", "object_relation": "md5", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "8e9d8780-1297-4f65-a710-2258688ecd59", "comment": "Malware payload (Mirai)", "value": "cc8c768863030e608fed3be65127a7a71e93df0ffe0a3836ed175a5fdaa6e55d", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "adfe37b2-6157-4261-af42-df23376971bb", "value": "T1F7764811FACB10F6E9031D3055BBA22F67314D4A4B24EFD7EB407E69F93B69109362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "f7050601-2eba-4b83-8be1-fac269b6efce", "value": "98304:ieM7WHUgNZ/DMeSAOEb7ogA8FGzX65dNyb7C+pKvMR/EZE:igHUSDM0ekGzKL/ZE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787312128, "uuid": "3e2b747f-7801-49af-948c-070ed754659a", "value": 7487650, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "228e4bea-b9b9-4013-9ad2-7c33d21c875b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "687f565e-9d54-11f1-8686-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1787312128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "6dc113c8-25fb-4bad-af68-0050b0865158", "comment": "Malware payload (DDoSAgent)", "value": "17382150545bb82b808c83bdcddae8f1", "object_relation": "md5", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "aa784a02-62bb-4064-a10b-d14d19c1b34e", "comment": "Malware payload (DDoSAgent)", "value": "cdd44b27478cf65a1fafb97daacc3908cc64c0b6e4128657a22e545efd192651", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "d2834c91-fe1a-4642-9ff1-231a56642486", "value": "T19C765B57FCA511E5C0AED1358A73A213BFA17C491B3123E32B50B6683F72BD069B97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "0061be68-811d-4e07-89c3-83ca1f49157b", "value": "49152:Kz9fd7WC4tQyBHuJmbp7HN3X9noOrNUc7dK3ssRKcg0/CVIJTsjv/dPbi7mi83/b:Kzj7pX4v/dQVgEsXd+QoqJEq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787312128, "uuid": "2384e752-3952-49cb-a7b9-c761aab15f65", "value": 7770274, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "64b42c08-1429-4fd1-be5d-50ad368504ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6895f552-9d54-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787312128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "19fb6a3c-49ef-4725-8433-a95b13c48da4", "comment": "Malware payload", "value": "dd40b7abe3c93da37644d6576c86227b", "object_relation": "md5", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "0895b34c-5c40-4381-99b7-0f22bd067701", "comment": "Malware payload", "value": "4294b8bab855aa657963687c5aa19b0dce91e32c9b97686a8ed6237c55f227c7", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "8185917b-01f5-4e6c-80e1-5ed7b1cfb74e", "value": "T12B763A57B8A24982C5E43A37B8BE81C433630EB98B9716575D05FE383EBE5D90E397", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "39f506bb-2438-409d-a397-43de29264a34", "value": "49152:6BLNe28uHdRKRNJpXT98x7xakWmcCdh6HXgIM5Ews:6tX8uHdRKRNJB9szcghQXg3Ews", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787312128, "uuid": "a215793d-16cf-4aae-a12c-7e73fb4b3d74", "value": 7471266, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "50678dcc-ab54-4ae8-a165-1c217cafd07b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68966dd2-9d54-11f1-8686-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1787312128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "1233215a-db33-4ed9-9406-edac05f3a9e3", "comment": "Malware payload (DDoSAgent)", "value": "15069381a3c26c0b5e5eda12881bff33", "object_relation": "md5", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "bc887c23-42c8-425e-8a4f-9eab8d68a592", "comment": "Malware payload (DDoSAgent)", "value": "403d7daee87202339a02e041f5525ba727a557fe4b6c6b7a4ae25fb5336c003c", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "770e8c5e-1134-49ed-a128-931eaf21b7d5", "value": "T14F861905BC852BF6C82D4E3485EACAD512705D104AF2467A2664FEAABC772387F57C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "faf56d93-7b6b-482e-b9ab-785410f11c1b", "value": "49152:XNFM6TuoIkHMpG0vhmmmZ/cQzEpEkAx7HJP+lleZPOg5Ea:XaF5/uEa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787312128, "uuid": "386d4937-9d63-4929-ac11-adba8de4f994", "value": 8388801, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "807d5054-09db-47b1-bada-44ab473019df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68b1545c-9d54-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787312128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "78c08464-3ca6-42fc-b382-9a9be5e9b6d1", "comment": "Malware payload", "value": "1d99abde05b9c63051713b822153c250", "object_relation": "md5", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "970ff979-ec6f-4375-9058-afd51481e3d8", "comment": "Malware payload", "value": "377a086f0ce6b33bf749b8201a0dcdb0794ab6dc34c00381fc1dee8ca62fc4ee", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "3100d6bc-59f8-4d19-b66e-4daea39ed6c3", "value": "T151762A57B8A24942C5E43A77B8BE81C433630EB99B8756576D05FE383EBE1D90E393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "f8942cf0-c4cc-49a2-a825-38ec48fb7b26", "value": "49152:oIU/xzhs0fPkuhRtDO8Jno3WA1s5CP0hpfU6L5E8s:hU/xzh9fPkCRtDO8JnDwPwpfTE8s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787312128, "uuid": "a8d4a1e2-9492-428f-8cbd-fe522f042293", "value": 7471266, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "ea1804ce-3e51-4e45-b996-ac072b2af93d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68beec67-9d54-11f1-8686-82aee05be84a", "comment": "Malware payload (DDoSAgent)", "timestamp": 1787312128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "f429f699-ef21-4a8f-9ff5-6c3225f5257e", "comment": "Malware payload (DDoSAgent)", "value": "0d5eee05e1bb91c0e3f1116594ab131e", "object_relation": "md5", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "a56d5337-00bb-43b1-99c0-61064a62c0ea", "comment": "Malware payload (DDoSAgent)", "value": "f3b46bea1de64b4b8314f076ad79ae6e19073a23f5e05dd64ee6ab0af75cc66d", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "fed0e200-60c5-4c91-bf46-1eba7d5fee5e", "value": "T14B863A17BA29E71ED628213058F2CA946B690C9A01D79557B381F71CEAB307D4E6FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "a2ed98df-f7f0-406e-bdae-238c6cc8004a", "value": "49152:419ifHAINOnFXNuZszZXE/ztV9FxwYWgePzFfZGSe/0P7lsG9Z1hSt6azZRQcyM+:eAx/FaNDkunIjE7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787312128, "uuid": "e5899817-2223-4f5f-9cdf-66068255f91e", "value": 8388801, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312128, "uuid": "22e8fb99-2de2-4ac6-b0cf-046f7c3e75e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d2c5985-9d54-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787312189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312189, "uuid": "8b29f17e-2476-401d-ba9e-03d705ddda98", "comment": "Malware payload", "value": "fbc5eecaad7bd53874ae9acc03546278", "object_relation": "md5", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312189, "uuid": "1675b74f-e953-4b13-a845-ecc7a210b13c", "comment": "Malware payload", "value": "9625b404c735b6ac175ef6140e0108ed8f3cdf72df2b257f546373b586e3d4f7", "object_relation": "sha256", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312189, "uuid": "3e817546-5793-4f71-9bc3-85367547a23b", "value": "T18A762A97B8924942C5E43A77B9BE80C433630EB99B8752575D04FE383EBE1DA0E393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312189, "uuid": "d6bdfd5c-552b-48b8-bf55-3be3a8aad57a", "value": "98304:/TfR8C6AHdgiEJ3TjyObdJpM6NZOooVmq6QQku8pubdEWb4SCH45ATJlr8CPv/c8:HQbDjyOb5+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787312189, "uuid": "6f7b0d61-3702-46ab-b333-0595e1817a67", "value": 7602338, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312189, "uuid": "7f15b2fe-487b-451b-bb0a-89d0dca78b28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "980002dd-9d56-11f1-8686-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1787313066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787313066, "uuid": "4c3358ec-0e9d-40ff-b801-5844b7b5d907", "comment": "Malware payload (ConnectWise)", "value": "9f6cf57a2791b8c53733f410804dcd1a", "object_relation": "md5", "Tag": [ { "name": "94-154-32-68", "colour": "#4b6d1c", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787313066, "uuid": "782be3b6-908c-4939-802d-a0d2b3088b57", "comment": "Malware payload (ConnectWise)", "value": "c2e63d8266f7c297f0303eecb4cb18dd9151ada99c13ca1683794eb8d6db8217", "object_relation": "sha256", "Tag": [ { "name": "94-154-32-68", "colour": "#4b6d1c", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313066, "uuid": "1e7f4699-b4fd-4a33-9be1-8148643ef858", "value": "T1B7647D11B9C48432C273383147B8E2B28DBDB8301D655B8F57A81D7A9F745D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313066, "uuid": "e5d6b110-ba8b-4cd0-97a1-e0f2443f0787", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313066, "uuid": "5acefde4-a8af-4a84-ab76-8e1e64b7ae4b", "value": "6144:amlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9:p1iw7gryNkSV1hy1Z1u2JLu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787313066, "uuid": "ed4b2955-5a11-4d45-b7cf-6845034f94a9", "value": 312536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313066, "uuid": "a6ddfb0b-2c45-4f33-ad37-8db0792af5cc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2807deb3-9d57-11f1-8686-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1787313308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787313308, "uuid": "895450b1-22f4-496a-83f4-26487b9f81fc", "comment": "Malware payload (ConnectWise)", "value": "1a24321c2ee34cabd7b610da455ea11d", "object_relation": "md5", "Tag": [ { "name": "94-154-32-205", "colour": "#7a7e0d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787313308, "uuid": "c41159f4-5178-4cbf-88ef-547b2ecad86e", "comment": "Malware payload (ConnectWise)", "value": "0bdb81149b22afe5219c75aa9679a6a8cb577f9d5659857646b2db7bf3728af1", "object_relation": "sha256", "Tag": [ { "name": "94-154-32-205", "colour": "#7a7e0d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313308, "uuid": "8ac9370a-b7d4-4614-a6cd-b5594d1156f1", "value": "T1DA647C11B9C48432C673383107B4E2B28DBDB8302D655B8F57A81D7A9F745D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313308, "uuid": "b1aae6f5-ddc3-4d52-9e34-ba771cf5a10c", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313308, "uuid": "84afd4f9-0a5f-4754-b0f6-5ed25380a364", "value": "6144:imlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFji9M:h1iw7gryNkSV1hy1Z1u2JLu9M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787313308, "uuid": "51594de3-bfd3-4f67-8726-b11e705bd9c5", "value": 312560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313308, "uuid": "286c7fd5-fd62-4760-b32f-9e2b115c998e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f6f271f-9d57-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787313481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787313481, "uuid": "da85fddc-0890-41cf-8484-d58349e88bc5", "comment": "Malware payload", "value": "0de8cdf03ecd8c0f8574d55f7e988659", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787313481, "uuid": "0a4760ec-9eef-466c-9c56-df07dda85af2", "comment": "Malware payload", "value": "fb7f73d46e3c749bfbccc25afb43f52237cc71669ccdd0d3c5ce720438881153", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313481, "uuid": "c1d636c5-59db-4f01-a448-6d3cea33c175", "value": "T14E24B67CEE86346A9901D2A25C39BBEAF16E9C4BDD067B37306DC021D7902DCED1A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313481, "uuid": "de4ed889-a1bd-401e-aa38-16fe2f9b7336", "value": "3072:l5WT4xKFkd65gVwvua4Cl2f3xBJyJWJ/q1UKGbJWoloZBMIB2ekMODXbGKA41qYn:nJzAimGwkozAR7GZjbSj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787313481, "uuid": "fc5d493a-8be2-4dc8-812b-d925999d2ed2", "value": 218885, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313481, "uuid": "94f4d80c-ecaf-460f-beac-24232167a020", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89132ad0-9d58-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787313900, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787313900, "uuid": "890f12b3-539f-42cc-83b6-88f9caffacaf", "comment": "Malware payload (Mirai)", "value": "495c8c0a42a68abdaa1b206d2d70e4a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787313900, "uuid": "75c5c7f9-0f0f-4368-be67-8226fdd3b220", "comment": "Malware payload (Mirai)", "value": "fd49082c1a601650525c3497fa5c10bad187a3862ebe371720658fa6f658e777", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313900, "uuid": "409370db-f0f8-402d-865c-2893ebbf4833", "value": "T14B433A81F9C750F5D8030578605BB37FCF32DD259031EA5ADF9A8E2EE527A0172263", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313900, "uuid": "9224e82e-8984-4ce8-bce4-9197da6e43fd", "value": "768:EeX3kiCBjKKnOiuy/a5dYnhHV9RTurLpW3THhwQr6WXTiro9lqjKpiRBL54xw9wO:NnkiiKeNzH3gPpWNwk6girk7i7Lwe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787313900, "uuid": "df959aff-56ec-4ae7-a412-8d61f55cae9d", "value": 59856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313900, "uuid": "a6178f70-9697-42e9-8bf4-63b1b1a6087c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "855d2254-9d5e-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787316471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787316471, "uuid": "e7c0d415-4981-4731-ba9f-d2b941c3c7c1", "comment": "Malware payload (Mirai)", "value": "b2cffaf68c7f8050cf4543241d8a552a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787316471, "uuid": "d2222655-9556-4958-9a2a-863bdcce0c3c", "comment": "Malware payload (Mirai)", "value": "fd7182f1cb5d62db33658e8c7cbedcc8fa08b279d37ad22b8edde310e0e9107c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787316471, "uuid": "6015ab3a-a4b6-46cc-baf4-d53e43156812", "value": "T120731A96B840AB11C6C249BBFF0F114F33174B6CE3DE731259285F60778B86B0E265", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787316471, "uuid": "42c346b6-14a0-4b2c-bcb2-87fe7d42f458", "value": "1536:kQncvqmTpqEVCHFv1cg42ZwdmoSaJsbcM4iWLleIxE0x5fYOK:8vDTpqEoHp2g4RdmLaJDLleIxRVpK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787316471, "uuid": "7095c381-c4a2-4ab9-9be8-7c81c299376a", "value": 75148, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787316471, "uuid": "4943eefc-f28f-4262-8091-c79f7c4f8f94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d737ecc5-9d5f-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787317038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787317038, "uuid": "3f27a0eb-3529-4ab6-8772-ca293cae2b91", "comment": "Malware payload (Mirai)", "value": "cc9899fed87ebad08db9677c35d249d2", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787317038, "uuid": "66448e49-f752-452f-994e-03e8236de873", "comment": "Malware payload (Mirai)", "value": "30369de49e7a6afafaa7707088d6e2abdcf95ec57b729ff25f525011a5d25ad1", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787317038, "uuid": "9da7501e-3194-4a66-b8aa-aae316b16087", "value": "T178435B84A5CBF6F5F822047C247F5BB25A33E93AA031DEAAC3599532DC16701E3267", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787317038, "uuid": "c7fd72e0-346b-4fc8-ba0f-c8a8fa94399d", "value": "1536:VSZ3jmXyikd3LCMGR1Xr8txaniju/1PDdGawErHC:IZzlJGR1Xr8HaijE1L3X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787317038, "uuid": "88656ce5-cdee-4d13-96af-8035bea9a388", "value": 58576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787317038, "uuid": "fd5a42e5-f281-4165-a45f-2e2d1c8ad872", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0eb0802d-9d66-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787319708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787319708, "uuid": "29e3ceb2-631f-4245-98f3-64d540efba9e", "comment": "Malware payload", "value": "d4b3e3b768e7977c02884f69c7e0ece4", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787319708, "uuid": "f6999daf-9db5-4f64-a3a2-f5ba39ef61ec", "comment": "Malware payload", "value": "1c35bb9e30c7b7b2a8f468de3562c8120bb284613465bf71a644a328e09e2f8d", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787319708, "uuid": "88cf40f9-ed94-46a0-9fd8-5013b2a9d7b5", "value": "T1F6D097A3547343B020A19420F2C77448B1558B3FACA1CB3CBB4364B41F08B8EF0C02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787319708, "uuid": "8a3e36a3-29ae-4e9e-ab1c-dd6144748e05", "value": "6:hT+GFudt9LUCnFPfYAulNXYq9DG+NjVsNXYrkJ:VrFuH9hF4Piq9DGmKi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787319708, "uuid": "04438486-69ef-4a0b-b9fc-2a14bb0fb875", "value": 266, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787319708, "uuid": "939bf7f0-b4c0-4be2-b653-fc0dc6803ae3", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f4b1df8-9d68-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787320595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787320595, "uuid": "cfd3d0f0-f00f-44e6-b6fc-284114541ec1", "comment": "Malware payload (Mirai)", "value": "e2a658950d3f10b1099f310c9867fa1e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787320595, "uuid": "8cfb6f86-978c-46ef-bc94-020c207d5d6a", "comment": "Malware payload (Mirai)", "value": "7270a65f0be70dc8d3750ad6e230436188304641c03fb2aad8b30022024fa119", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320595, "uuid": "a0df3395-94bd-48b9-9f28-c7f8efdaf6d4", "value": "T1FB83D60AAF618EFBD8AFDE3752ED0B0135DCA51722B83B753574D828B25E14B09D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320595, "uuid": "835af29e-4ac2-462e-b44b-778370af7342", "value": "1536:OHlAJwFIj+ZknKdA8fc/6fohZRH3eAK1oTT1rGsN86CLg2NnnuZZQTsX269u64J:UlcZV1yIfCL7u9n4J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787320595, "uuid": "75df36df-9b84-4a16-ac39-a05fdf7d4f9c", "value": 85284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320595, "uuid": "1a7ab43c-1a82-4192-a568-568c55738047", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a65f8e3-9d68-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787320613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787320613, "uuid": "17a4c692-4e9e-44aa-93d1-d5c51864903c", "comment": "Malware payload (Mirai)", "value": "ea910592733fd21409b5f0d5aa4cf78c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787320613, "uuid": "82b06ad6-f944-47ea-9c69-14261c4cb3ed", "comment": "Malware payload (Mirai)", "value": "52eab3b8a7fc2f62dd67068419b87b871fc2d77b947ab3228fc4f016a4543d11", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320613, "uuid": "0e01c136-a1ad-4d08-be60-617d2916c319", "value": "T1F0634AD6F800DEBEF449E33B44630906B231A3950A430B767257BD67FE721A45C66F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320613, "uuid": "f117ef47-dda5-48a6-93ad-64e127b1bb1d", "value": "1536:uMMuY2gYLVgI4RG84ZyvLejHd7gBkJxWBTb7J0vpi:BMegyVh4REyvLemBCxa8pi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787320613, "uuid": "25fa75fc-09ef-4abd-98a0-2f12c52a2211", "value": 72696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320613, "uuid": "7daddc87-5a5b-4d0f-acc0-eb34f7712770", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ea4e8e7-9d68-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787320647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787320647, "uuid": "e95895ac-0dc6-41c9-843a-8918f6da1c0a", "comment": "Malware payload (Mirai)", "value": "28063bd8dfecb3ce10e598fda3f501f7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787320647, "uuid": "9edb5ae6-e20f-451a-8f6f-d4d2c43975a6", "comment": "Malware payload (Mirai)", "value": "22ca93f691d342cbf50165e97503d80911fa78343005896fbf0a40b5f8f29dac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320647, "uuid": "8bf8b1c1-b220-4c54-833f-98b4b5ff00e4", "value": "T1A4439D63CA723D18E10445F174249E798FA3D900869B2EFEA665C32AE013EDDF595B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320647, "uuid": "379040f0-bc6c-4672-91f5-eb604561db8f", "value": "768:kF55qRTrUNWt+LTLVfE/hc91ngDCyjYKLg4SdpiauoXecK2ClW4Jkf6c4KFI:kqtkVf4e91AmKLvS1xXc2ClRcN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787320647, "uuid": "4af5d17e-1571-45b4-864b-83e93c12c5ac", "value": 60300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320647, "uuid": "a34dd7af-c532-4afd-ba9c-ea134bead40e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "802fa8ac-9d68-11f1-8686-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1787320757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787320757, "uuid": "2aed5ee6-33ca-4758-8325-3c010da17840", "comment": "Malware payload (Formbook)", "value": "e21fe731e011bcf0a181f2c894da220b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787320757, "uuid": "2bc5b36e-f537-4a19-874c-21dc0bb1d83d", "comment": "Malware payload (Formbook)", "value": "23a8568003768b2f4e2fc3bd47a6d6d054c11ce622737d27df4c4f1bb0c28146", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320757, "uuid": "bbe1fc21-9a07-470b-88b2-9457e8a67d1c", "value": "T14F542306EBD391F6CDA08031D6CE15A609BF5C75E3D5F80B3B81A6CC8B752BA1E993", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320757, "uuid": "6a3941a5-b2d6-498f-9152-37d35e21b561", "value": "6144:rZ1jy/W6CdFAe6+RL7BD2x+K2rvF4OkJnp3D2sVAATmoAAx/XQLc:zjy/WMe6+RlvVkZQEAUmoZ/XQLc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787320757, "uuid": "5936796b-a294-4208-bd1a-e64ee94e633a", "value": 284160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320757, "uuid": "4a34dbfa-2cbe-4c33-9f8e-d2ec8b131f2e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6e7caf2-9d68-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787320903, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787320903, "uuid": "30de9af8-0db6-42f4-bca1-8abbb7db4d1a", "comment": "Malware payload (Mirai)", "value": "be57fe32553e6a45ea334437437b53ad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787320903, "uuid": "55dc98a8-0e69-42f4-878e-f3d2be9434f5", "comment": "Malware payload (Mirai)", "value": "0b5deaf2954f3b87b6a21a886f59a41267541429e5164b2a374b6915c975c81f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320903, "uuid": "16300cd8-c269-43a0-8ac5-ff22fdadf287", "value": "T10E5309D5B841A621C7C299B7FF0F424E771A8398E1E93343992D1FB0778B85B0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320903, "uuid": "7b60e423-88d2-4f03-90b1-6c7046906d60", "value": "1536:YBKJhX5V5UFLWp4vEteZxxDOgEkoBYDWAgM:YBUf5UZBvEt2UBKWI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787320903, "uuid": "771e8f1d-49fb-4260-8375-4ed767ccc0cb", "value": 63384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320903, "uuid": "c9eeed7f-b2ab-46f2-822c-cf3685963340", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4947515f-9d69-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787321095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787321095, "uuid": "d57d2b90-2497-4a81-9c4f-a03204eba6ba", "comment": "Malware payload (Mirai)", "value": "068434c092bfcb60360f842846ea6319", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787321095, "uuid": "68641453-dc8a-42fe-91a7-42f0b96b3b99", "comment": "Malware payload (Mirai)", "value": "f98e93275c5ae395f4dd14e759ba7293c0c05b10b43d1dfef887fe9b0d44150c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787321095, "uuid": "901f8b26-ec37-4621-9f88-5b4611f6a67d", "value": "T184534C01B31D0947F5972EF03A3F2FD2939EEED021E8E688761ED74591B6A314246E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787321095, "uuid": "ceedc906-4439-4987-ad69-a55338038398", "value": "1536:03m0fm/QiPBBgHuiv5zV0a0sPbpWht5B+3N0:0Xm/Qi5BglvrLzbpWxB00", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787321095, "uuid": "699bf0ce-22ff-4780-9e16-c1b39b79766b", "value": 65312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787321095, "uuid": "f188d23c-a7e2-475c-ae5d-f28c8a2d2513", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccfef10f-9d69-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787321316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787321316, "uuid": "2e60f4b6-7e42-406d-bed1-a9d78f1e312c", "comment": "Malware payload (Mirai)", "value": "9037559b4578b44bbe7f99c13a456650", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787321316, "uuid": "7443715c-2aa7-44fe-a3fb-f9084d9cab6a", "comment": "Malware payload (Mirai)", "value": "19695b21ffdf08bd5764cb6ba35d80f8376bdf9bc38baf54f64ac98a0e9335af", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787321316, "uuid": "4b02ad87-1417-446c-abca-071395079e74", "value": "T16783B54E6E318FBEF66CC2384BB74A31A35923D523F096C0E26CD5151F6028D595FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787321316, "uuid": "a35936b3-f968-4cf3-8114-527488fc7cbc", "value": "1536:X4gnrLKQH4wdEXe5r3XaQzNPIsODHY0sY/wecdFCR:XP7yXe5r31KdHTsY/0CR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787321316, "uuid": "36fdd46b-3218-4747-8262-f07d72a3b00c", "value": 85284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787321316, "uuid": "6e96eb26-867f-4f82-bbe2-8fb90341cfa4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abec2f83-9d6a-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787321690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787321690, "uuid": "c9f2d789-6b63-405b-bdcf-af6b72865ce0", "comment": "Malware payload (Mirai)", "value": "bbf68e73a870e8b9d57c58bcb9c6fa00", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787321690, "uuid": "29174184-1ee0-48bf-9722-c4a19f0a5ae3", "comment": "Malware payload (Mirai)", "value": "431c0c23733381e927f9eeebd3b48eb3ad26df5aa381f55789d91772f7d804c0", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787321690, "uuid": "db7acb04-da06-4103-8d1b-7a227cea9e4c", "value": "T126E31956EB419B13C1D31BB6EADF42063323DB6493A72305552C6FF43F87A9E0E626", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787321690, "uuid": "4979f1b4-b7d1-4d49-acba-0ab8b0a71611", "value": "3072:e3BF4uHYzXC6qaq3bEOh8GrHNB1a4qAa+R6qQnM/98L/GIW:U34/qaq3bEOhfrHT5a+R6qcM/9Q/3W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787321690, "uuid": "0cff4843-4839-41c0-8c1d-130358dd330b", "value": 150269, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787321690, "uuid": "13bec1ec-0664-4ac3-be17-739d8fe23711", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b658b669-9d6c-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787322566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787322566, "uuid": "41d91b78-c49c-409a-98bf-0a763a61f171", "comment": "Malware payload", "value": "3612e0eb8136489c1aa023bdd9113390", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787322566, "uuid": "1d0b337b-badc-4e27-b50e-69742aa02fe3", "comment": "Malware payload", "value": "c38f77c12b348a4ed19303f811b8f6a3c6dfc8277fd0ccbc33770bc306251ec4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787322566, "uuid": "7163c5d9-f828-41d2-b648-b6ffd8970521", "value": "T1F1F3E85EBBB23276721B8309FAC1B768916DC153EA011EE7BDB5F118CBC229201736", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787322566, "uuid": "966a8f61-0b26-4c5e-a94a-8d74bced8354", "value": "1536:japAr5lURr4kjofmmkWl0Fr/vqLBavZWkOA4YwhJgTnUX0vZI:Gd4kyA4TJgTtW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787322566, "uuid": "392ee905-7554-436e-9a25-8d6eb44f9ca7", "value": 157652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787322566, "uuid": "12938a88-9b21-4cad-876f-22493e9d4469", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02e100af-9d6d-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787322695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787322695, "uuid": "93c56a04-ab92-4a44-a5be-ab14cc154183", "comment": "Malware payload", "value": "68e637d224946cca107d3f82d2f7fc0b", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787322695, "uuid": "156f7a66-405d-4827-bf88-341b0b0183a0", "comment": "Malware payload", "value": "b2f8dc74ef6f703cd8f9fef4f6e0437deb1e87239118072140c272996f5c0860", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787322695, "uuid": "6a551a1b-4fc5-434d-bae3-3d14d145b237", "value": "T17AB5CFE6E2E3AD8BFD48CCF3415807E57C2112874A3117A8376AB90C7D1D8B98A59F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787322695, "uuid": "7a5df87b-4cd8-4322-9ffe-4e9ec8fbe9ad", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cG8udkUswi1mXde:8UixbItdTrJoFVPMvXG8udkIH4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787322695, "uuid": "d39e8403-1431-4eac-849b-4595bf58fc57", "value": 2486437, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787322695, "uuid": "a0d2b2ba-43d6-4839-ae09-f8c53a7b3f91", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cafe5e8e-9d68-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787322899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787322899, "uuid": "c3ccf137-7a1b-47c1-9a41-d70ccfde9633", "comment": "Malware payload (Mirai)", "value": "a30c51ba87aa8f128f651badfc7082e8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787322899, "uuid": "5d17aecf-1b8f-4e52-96ce-30aa1980788d", "comment": "Malware payload (Mirai)", "value": "ca40b2d13e014984d5c20369382afb36589072b0bf27a8229ecfad94d63f01b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787322899, "uuid": "eb9eb978-40fd-4aba-8574-7a131dca4f91", "value": "T12E532907768180FDC4D9D1B8199F6636D963F53C237AB25963C0FE2A7AD9D202F2E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787322899, "uuid": "4f328344-3235-472e-9008-2789c148660a", "value": "1536:98LfT4OxQowkCyv5SwhF4Wg3zqUoP1uLp3:9yb4yQo5Cyvthjg3RoPwLR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787322899, "uuid": "2b63335d-c51a-4918-aafe-0e0ddf14d0ba", "value": 65288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787322899, "uuid": "9de5dbd2-2696-4710-908a-a2a388f94004", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6d1f5cf-9d6d-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787323023, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787323023, "uuid": "6c8e696f-c20e-4f33-a9cd-37f3d3492791", "comment": "Malware payload (Mirai)", "value": "a088a18a4557122d33ddcbdc64e2244a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787323023, "uuid": "14c2060d-a273-4ecd-9577-cc3a7fc54874", "comment": "Malware payload (Mirai)", "value": "481f06563e0e63e5046ccb4549624e0df00ad8d80eb9a2b59d4af97bf6cd1412", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787323023, "uuid": "7d0c2711-5621-4c21-a1ba-16d3761b5797", "value": "T153734B25BE250D2BC1C4657A61F78731F6F6538B24B8891B3DB10E8DBF58A0032677", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787323023, "uuid": "f938f159-3743-4928-9767-fdb186ae2070", "value": "768:Rlsgi0i6U5xeTzCZzIJnCMwuKtEnuM2YO+Nk5V4rIaRdXt1DIs:Rlk0yxeTzC5IJnCMTKtRcNk5GTt1D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787323023, "uuid": "b7e9c01c-6de9-4eae-9e04-c8951d8bd747", "value": 75168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787323023, "uuid": "512ff8a6-eeb0-4516-85f1-b18fc258f935", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d557da74-9d6d-11f1-8686-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1787323048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787323048, "uuid": "e1f82c59-c7db-473c-bc68-026fdc0d1acc", "comment": "Malware payload (CoinMiner)", "value": "90d5a367d6456e854288cc32e33049b0", "object_relation": "md5", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787323048, "uuid": "2d445e57-1d5d-47ef-950c-f0d9780b64fe", "comment": "Malware payload (CoinMiner)", "value": "febb60b38e035167c3c5260aa038302d538ffd6ce352679f4b66db231bd7ccaa", "object_relation": "sha256", "Tag": [ { "name": "42d208560b5e968930dcedab3c2bf57b", "colour": "#7d1dd8", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787323048, "uuid": "3ee79942-29e1-4dd4-83b7-cc9e891b6dd3", "value": "T14A3633963EC6A572E042C3BD814B69BEF73EBBB15521BE173ACC69044E27A04107E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787323048, "uuid": "299748d5-6dca-4feb-bc53-d5046933be08", "value": "35171f6f6a1bfee47cbc04cb345c411f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787323048, "uuid": "f638544a-0059-455d-9b76-d46c7b4eafd1", "value": "98304:G+E54uAnczkXw3G1hUHPgfe5H4csGHQfX3wYhSy73Z1yUnfYV6tT2r:zE5HBzh3RH4f13wYcy7PJfQ6tT0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787323048, "uuid": "aaf8a5cc-f8f1-476f-899c-a8a2a500be1c", "value": 5279744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787323048, "uuid": "d44a1acb-eead-490e-a44d-fa0e65479116", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c97fe3b-9d6e-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787323301, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787323301, "uuid": "d5d4a038-7706-47c6-b59c-d6fb4dfd0993", "comment": "Malware payload", "value": "50a276026ff171a5f63bba04d04f80fd", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787323301, "uuid": "48d26135-0d73-4926-aab7-2071264f58f6", "comment": "Malware payload", "value": "43c93f6c9d160bec2d6beab026a3f4f88938ab981a1eee5089acda715a852157", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787323301, "uuid": "8d374eae-48ab-40ee-b1fc-c8c2cf5eb6c7", "value": "T1B493E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787323301, "uuid": "a93b2a51-d2dd-497c-811b-6f253ddb7eec", "value": "1536:dap9kuEEwH8kw0PMqpYJKNoE+pTYeGf8BqLv3Tli0oRGpNuqYPPXCIH8LutVWw:MIuEEwH890j+pHBqv3Tli0oRGpNuqYP9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787323301, "uuid": "357a4905-645a-4d7d-ac15-c04ff805d334", "value": 89613, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787323301, "uuid": "d0973291-411a-4d4e-83ce-d8a1649cc06d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "120d293d-9d72-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787324867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787324867, "uuid": "da718670-247b-44ab-9980-af4ecb961d50", "comment": "Malware payload", "value": "1d60204a4bd5c931f09254816e98c942", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787324867, "uuid": "b597411c-8537-41e8-b0e2-928da6c92848", "comment": "Malware payload", "value": "ad87baeb2799a813ed51e5197bf4d9a653e96271e15f369659f7cb1102990b18", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787324867, "uuid": "e2497f3a-05e7-446b-9676-64b478823c24", "value": "T190117DC98C20C1AD92902E176C7BF21DC44E6E06DF609C80F1A872BC4DF4F849C438", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787324867, "uuid": "dbc98622-f412-47f1-9123-e6cf0ad49505", "value": "24:0jH1kCtiUihY15Ne3iNVWiVW9VWTvVWpVWcVWsSsIa:0RihYxMz1OTgqYZN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787324867, "uuid": "a4016500-81e5-4972-a38a-6af4c96385db", "value": 965, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787324867, "uuid": "cd221350-d751-437f-8b89-3959bceec3fa", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b4a2afc-9d72-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787324990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787324990, "uuid": "5c062970-b7b3-49c1-bef1-7e029d566792", "comment": "Malware payload", "value": "dc03f148a51e1cb984b31fdb95a75cc9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787324990, "uuid": "8274a101-14bb-4bb3-8a96-1ff3190fe947", "comment": "Malware payload", "value": "d35d4f4c2b1db4da7120ac34fd807534b71c6b57b891e62c394c49b3aa1de183", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787324990, "uuid": "e93571bb-9959-4391-a45f-25b97153e76e", "value": "T12BF3E85EBBB23276721B8309FAC1B768916DC153EA011EE7BDB5F118CBC229201736", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787324990, "uuid": "08201abb-e7a2-4f4f-bcec-10d681448e57", "value": "1536:5apArYlURr4k3bpnIPMAyCJ/Wg+jrF0o1iF4BlhYTynUX0vZI:Ym4k4F4JYTytW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787324990, "uuid": "e5859c23-c790-4ef2-ab2e-88f5fd0a093d", "value": 157603, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787324990, "uuid": "335f4c44-f4ad-406c-acd4-0f4e639898af", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d354c69d-9d74-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787326051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787326051, "uuid": "b4aef847-1d17-4b0d-a042-675409dd84f6", "comment": "Malware payload", "value": "dbd725cb47c3be29f863b7110b3a40be", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787326051, "uuid": "cb32e2aa-3fd8-4411-8fb6-a1e78def489f", "comment": "Malware payload", "value": "b8ed71994ee04ddfcee348001a9f05a06781be2a3ea069dd8f3bfaf0a0d9f02f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787326051, "uuid": "b69de5da-e410-4c47-9ffc-086d2a0b7e1e", "value": "T1F7B186234829AC721157CAA4B146762DC0EA8277F342C65A72FD815C9FD3DC281E37", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787326051, "uuid": "d8962b48-3493-4b94-be83-a4667260d16d", "value": "96:MJlH7n472wO36VvLb9NE0kNUmgHwrSUx9PGiq/GNt7sGoExml51pOT1pV8Q3O3NZ:MvH7n472wa6VvLb79GUm3H9PkGNt7sj1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787326051, "uuid": "6bbddeab-fea1-4251-8110-76ef91384bef", "value": 5413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787326051, "uuid": "f33892f7-9028-482e-b66a-4e722b53e995", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e38c9d9-9d76-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787326767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787326767, "uuid": "4b114fbe-a1a9-4070-aaab-68e7e08cbccd", "comment": "Malware payload", "value": "334a794d5137ccab915a0baadbff1f24", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787326767, "uuid": "d0734666-7720-4d16-9179-6d66d11760b3", "comment": "Malware payload", "value": "e3582fd4697d21b6f954fb18c27cd878c84e373cef455f3c53c27ef6a152b7a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787326767, "uuid": "586bcc25-1eaf-4489-84ef-ca2a68d4d6af", "value": "T1FC763953FC6914E9C2AD92358A639A53BF717C8A0B3127D32B50F6243F72BD069B97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787326767, "uuid": "75d6a218-c0d5-4087-ae1b-0ed0406d99a7", "value": "49152:mAWXLkncsMK3BREDrFuafde0FTPW9ttIuTsZaEAfOsDDuEMt/o7lpAsl22oQEzsr:mAHnxsNBabAg2Zgpj1w6E0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787326767, "uuid": "4ad55e79-af4f-4622-90bb-2649f26daa35", "value": 7553186, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787326767, "uuid": "e7f824e0-2f4f-41ea-ac32-de9f40aefc2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0b3961d-9d76-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787326905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787326905, "uuid": "20c20b1e-b520-4f3e-becd-429b14c29f91", "comment": "Malware payload", "value": "199b683cae65438f4ded51a26879a560", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787326905, "uuid": "894bf1a0-5cb7-429b-bdc9-79e7dc392551", "comment": "Malware payload", "value": "812460856e3b2913feca7b6fd45742b4a5279ea0fc5bd0ebb81feef545e39145", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787326905, "uuid": "cd59043e-6257-43a0-98bb-a995920a2d35", "value": "T18832AF1364EC9B527F9474536B90B581345682266AEBC1FCD2CE7C7BEBB432C8C931", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787326905, "uuid": "cc53642d-60d5-4c87-98a9-750755bbe21b", "value": "192:fvKRl83RtNuXojDp2e6cNPsVI6bt8/H7iDnlyIRWJmAS1pLcFls1+:fk83cyDp2eQXbqDipy8SdY9cFlsE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787326905, "uuid": "b2be9ef1-98b7-4cfd-9be4-460d2a8aca3e", "value": 11008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787326905, "uuid": "f2b30c96-d218-4866-8ed7-c8da6cf1e735", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12c20380-9d78-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787327446, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787327446, "uuid": "6551fc3a-3fe0-4824-abb7-46cd17ad3fd2", "comment": "Malware payload", "value": "ed6dd1dfe4d1b4db79ab20d5f7dd1c29", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787327446, "uuid": "4a2ca4ad-a60d-4da5-8186-b3881b2f290e", "comment": "Malware payload", "value": "c6e77e1413dda88acc4a245a32be5f82e1772c9c2c7fabf9d17835d1aa486484", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787327446, "uuid": "015f2bf1-7367-48bc-9c31-8ad15e99839d", "value": "T194D09772922382309472CC71E3CAB801F9054F7E2E08C39E780310B22F02204B1C2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787327446, "uuid": "40087eb4-b205-412e-8285-e1c700557c43", "value": "6:hTXLtKlvrnR3IEAulNXYq4HvXDG+NjVsNXYrkJ:VhWD9IEPiq4HvXDGmKi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787327446, "uuid": "f35435c3-d718-496a-9645-46691ffe96bc", "value": 263, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787327446, "uuid": "5024da96-7749-431b-8351-d0c19102ff68", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23655338-9d78-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787327474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787327474, "uuid": "2e7c4bcf-8313-4fea-b6b5-991686e22767", "comment": "Malware payload", "value": "9e3414429afa5f14c231499248235d4b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787327474, "uuid": "72849e0b-afec-477b-b570-016dea52b093", "comment": "Malware payload", "value": "0d9b59df344fa913d783a672964130586164971e47810fa5620ac033792d6f34", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787327474, "uuid": "6f4af345-9382-40b9-9e8e-e394de2c6ad4", "value": "T13563F97378C6142A311F028F6107732CB5BA99D6DA01D9F1F6F661285BB4FA136F32", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787327474, "uuid": "59313444-87c7-445f-8610-6a1f0d0b4a1c", "value": "768:uNZdypGVU1pupU0nMF/FbD3tKAD27p+EeLSJb9ee7x+qa8PWuo0sCy:uFyp4UKMpxD3tKAD2VDeLSJbn+qa8PW/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787327474, "uuid": "a6f0499e-14f6-4c3c-8b23-818be6f6163f", "value": 70350, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787327474, "uuid": "60efcfd0-1db6-441b-b063-ab463bc745cd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a2cb9cd-9d7a-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787328451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787328451, "uuid": "d74e17db-8ce5-48b1-bc5d-db311dc144ac", "comment": "Malware payload (Mirai)", "value": "ca0435ba830684a6b6697f72ab2d2161", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787328451, "uuid": "8501ca6c-793a-481a-941d-346f208019bc", "comment": "Malware payload (Mirai)", "value": "122ed4a2e71181b646d494d4634d94451a1895d7f79429f88175e515981cbee7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787328451, "uuid": "53b469a6-b237-490c-877d-f9ed68476238", "value": "T1DF5302A2F2419A01C8DC9C768C5CBA551FC1A42E65DC173ACADC317745A2E323B9DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787328451, "uuid": "fc4dd5bc-acdb-47f4-80b9-7dfdd6df8aa9", "value": "1536:NlCTu5tHqW3HvcjpYkAx/huIBVrNkRmCEkrnouy8Lzkk8:vF3HEFYkAx/RBVyRmFkzoutUk8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787328451, "uuid": "871c8bc4-91cb-4af6-b5de-a2bcf9226c63", "value": 61496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787328451, "uuid": "50b54af8-7ad7-449d-bfbd-21f67ef3f192", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a7cee12-9d83-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787332210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787332210, "uuid": "2a834d4d-bd6b-4f14-bea6-cb3784cd4f11", "comment": "Malware payload", "value": "3736f47cebabd502bfa069cbcaec53fc", "object_relation": "md5", "Tag": [ { "name": "54e64e", "colour": "#eb829a", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787332210, "uuid": "51780d3b-690f-4778-b664-b431f8494a13", "comment": "Malware payload", "value": "774041365d4bc2b1ca02a647cd1cf508f75bf869af1ae2e00c9c5ad3c7735084", "object_relation": "sha256", "Tag": [ { "name": "54e64e", "colour": "#eb829a", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787332210, "uuid": "bb107f94-796d-4055-8368-167e3b5131dc", "value": "T156762713799541E5C4AADE34C47382137A60F889DB3937936E21BE342F797C2AD7AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787332210, "uuid": "6ad3bff5-f392-4afd-a958-f6674b01cea0", "value": "4f2f006e2ecf7172ad368f8289dc96c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787332210, "uuid": "444e9913-ff7c-45b4-9df8-15fcf27855a1", "value": "24576:5vhfeeB51xuS7KISs/WVfgs/hQ9vovbcfkfo1JjJO/oIhFgyZ0p+tSHLBklKcVmo:9JDBW7r4Wo1JjJmSyZYwWBFA/g8F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787332210, "uuid": "7fcc2549-af97-4834-814f-496502bb8c41", "value": 7240576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787332210, "uuid": "ce2b6381-03ae-449e-9559-fd60e1861539", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "492ff1b0-9d8c-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787336127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787336127, "uuid": "4a52eac2-7847-4bfd-91e0-e508ede7fedd", "comment": "Malware payload", "value": "8d3c89a65cf2b88d932b68be6b404abf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787336127, "uuid": "bf158a5e-1a87-47e9-a1a3-7b7ef8ed550b", "comment": "Malware payload", "value": "16296c38cd4a727aaadf5501254fc945d8956b0042687489d0ce192c11bf075b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787336127, "uuid": "63fefd61-b144-4b76-b1fe-a59ae4196e0e", "value": "T128634B41E693C0B0E19341F00997FBE64631DF32941BEAE6EB9D3D61BC707824D96A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787336127, "uuid": "8445bbe9-e596-4d45-9546-989cff5be8ed", "value": "1536:qQwGr4rBkocXQWWnf0nrd/HeePOf+sXfyCNUr:qRXkoc3AoFeemvPyF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787336127, "uuid": "ea8f146f-24d3-45ff-a7c7-d60eb001de4f", "value": 70440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787336127, "uuid": "9207cbaa-1cd9-4198-8e1a-ba37e8338bc7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96dcf6fe-9d8f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787337546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787337546, "uuid": "3aa9879b-031d-4864-b5c6-923930d3ef4a", "comment": "Malware payload", "value": "ec6e24839978583c3ead6544a22641b6", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787337546, "uuid": "78265c2a-a7bb-4160-861a-2198fd162c03", "comment": "Malware payload", "value": "2ccc993940e2c7231ad033ae04f8ebc3bf6c925d0f53fb3a760d961f2ac4d704", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787337546, "uuid": "93d0275c-cf27-41fa-88a4-f2c0481f035d", "value": "T1B7D02E5250B301B500130E41F886A8407000C33E8C83CA0CBF033020AF4030EF0C0B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787337546, "uuid": "4f05dae7-6e45-48e3-b4bf-5ad1223664c8", "value": "6:hTkgKoNIgkhxVX2OgArnPYbAulNXYq9DG+NjVsNXYrkJ:VIokhxVX3PYbPiq9DGmKi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787337546, "uuid": "4799dddf-9b4f-4cdf-b585-7c1a9977cf75", "value": 266, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787337546, "uuid": "659ddf07-486f-4753-af4a-77bf2507b2cc", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbafacd3-9d8f-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787337715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787337715, "uuid": "646a8555-c5fc-48d1-a97b-d90fb75bbf2c", "comment": "Malware payload", "value": "82315729ac3b9275c4bd150051e00edb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787337715, "uuid": "eb9e0782-01ea-45f2-9649-33410fa8dca2", "comment": "Malware payload", "value": "5457e5ec684b5e2998b85d1ffb94b135b8445aa42a96a27de40c33ea4ca9e648", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787337715, "uuid": "6db8182e-3019-4d2d-a3fc-f8ab75a51aa3", "value": "T1A8E2B6036683C4F2D50330B296F2DBE24931F97B66299596C371AFF1EB151C1A2933", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787337715, "uuid": "cb62eec3-933c-49e4-83f5-bf1891f95f01", "value": "384:fIh+4O6dg2OL3yT2vrgystHOR2n8jWOCLiLS1GWMP7iBGI1IUWr4dj:i+4OM8Y2vrgywuo2KBAGIU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787337715, "uuid": "fc6ab23c-591d-4bba-9bb0-de5a0eca8509", "value": 32832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787337715, "uuid": "da80d714-d221-4214-b44e-a1627b6300db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c7d3f57-9d91-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787338414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787338414, "uuid": "ea3218df-8ba6-4948-ad03-297e0cfd7cce", "comment": "Malware payload", "value": "68b33d357aaeba366777fca4ac2965d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787338414, "uuid": "32057f31-c192-4d9d-b784-d87a68db7402", "comment": "Malware payload", "value": "ee5dff3c454667ac1b0ce7a2b5798d23bb0f4296dd2a311ed7bd04382bcfc248", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787338414, "uuid": "70a149ff-65fd-4659-930d-4c9aa8bff82a", "value": "T134D33B57FF0C4017C49369781E3B07ADF320BE1150B99516330A6A6F3BB2E716687B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787338414, "uuid": "2c20180b-8864-47ee-8707-217e28686007", "value": "1536:1TmiLyLI0R9fIJeccP31u73NuFlD3ZkGYGyFR3eydNdYCsbbg8rtaZ:1aiLyLI0oeccP0bNQ3ZkGYR10PHgUtE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787338414, "uuid": "16f9288c-05bb-4de1-919a-6897aa8fd076", "value": 132064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787338414, "uuid": "4edbaae2-2a28-4a0d-86e8-8ba3b76a32fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "867bf4ed-9d93-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787339236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787339236, "uuid": "536cc947-57bd-4cb0-806e-470185c81daa", "comment": "Malware payload (Mirai)", "value": "102347227008a0a47abbb06d503ab742", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787339236, "uuid": "70ee0881-4d67-4f15-b356-abb36f477abb", "comment": "Malware payload (Mirai)", "value": "7b2ca049f4624362e939243072e3f732efc9570c2344e4d29f4f83d476f300dc", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787339236, "uuid": "df0ef8a7-34dd-4b91-971c-49a5caf0a653", "value": "T169F37B77C8257F98C925D6B0B0709F7D5B13A520818B6FBA68A7C6748143DCDF6483", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787339236, "uuid": "f6a988d9-4c61-4559-9d02-6c394ae95e45", "value": "3072:4tHFEw5AZo0+Ko5b2nLrvJQrSZv/1DSPriWkwpK5EW31H6:4tHSOJ5QLrxQrSpgPkw+EW3U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787339236, "uuid": "c5480f1f-fb68-4eb1-9126-4fa3f28d185e", "value": 162456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787339236, "uuid": "98f02769-32e2-40e3-9958-e4b2907bb714", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be6562e7-9d94-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787339760, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787339760, "uuid": "916a3a91-35c4-4605-b8f5-7f143a96fffa", "comment": "Malware payload", "value": "aeeba70d7a7e5309d121c81b72377847", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787339760, "uuid": "0116d2be-0244-4488-b873-cd28b001fbf3", "comment": "Malware payload", "value": "fe85310021516a32392fc4e23e68212dbab0be8665d77189fea6ebbe879279d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787339760, "uuid": "2f42c35f-6f72-4a04-8dc1-5c4514f7ea16", "value": "T104D34C73B70AAF63C67D52B40EF2CA39D6E1260109E290956312DF1C7E3526D6C2ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787339760, "uuid": "f2d58221-622b-4bee-8db3-0e52c1dfe30b", "value": "1536:k+wXFdTw+cqPS9BbuUIhU9n2rVLg+dp/cClzYoldPaWAKZWNyRFZ3dXrrw8:UkqPYBbNiU92rVMQpU3oldHAEWq3dfN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787339760, "uuid": "8382e2bd-2e5a-450f-98a8-21a1bfc9c623", "value": 140432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787339760, "uuid": "284ac63d-1d24-45ac-8946-7b9af38bbee8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80445333-9d95-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787340085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787340085, "uuid": "2d547c4d-3706-4087-b58d-03255c249a38", "comment": "Malware payload", "value": "438824f462a99ccfd15423de3ebae934", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787340085, "uuid": "31581596-9472-4416-91cf-590b993f5427", "comment": "Malware payload", "value": "73ac2c096bd86f25d24dfb97529bac086cb8bb6f704e525402bea0d29da4ceaa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787340085, "uuid": "4e85ad6c-306b-4607-823b-8c1bf3fc5e57", "value": "T1DFD30A03ED856EFBC41ECD70452DC24A15DA5CBA92E5A26F71F8C98CBBBD20546D38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787340085, "uuid": "5d1ac358-d9d2-4787-9d62-cfc653db0efb", "value": "1536:LngHWtgXYDj3tH9En7Q5snI/6PWArF0Jx5gYwHWl/rE9q6Er:Lng7XYDJd5sI/GYx5gvuwQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787340085, "uuid": "705b80b2-3787-4f5b-a94a-ddbb45960908", "value": 140188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787340085, "uuid": "6ff1370f-21d4-404a-ba35-ad100941d0b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da3cd091-9d96-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787340665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787340665, "uuid": "482c46b7-7e35-4fd4-ba02-02b74b142cb8", "comment": "Malware payload", "value": "c9580d4e1f15e2b25ab431a754aacf93", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787340665, "uuid": "807b3cb8-2bde-4758-9c95-a4ef50b022cf", "comment": "Malware payload", "value": "14bd00e953398a24ddf29ecc17087d8004b154d05dac7d418c16c7d66b4484ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787340665, "uuid": "719668ae-c6e6-414d-892f-dc0162d0d303", "value": "T16433F86727630D23C0D55175A2E34332B6FADB4A28B88A5779A09EDD5F085E032533", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787340665, "uuid": "f00e095c-1dec-49d8-ac1e-e8564fc239a0", "value": "768:ylxGf49/pxFdADezw2Q+8btmFm9S9kCYO+a8LG0NYtkiDzj+i:n92GmFm9SYvZNYtkiXj+i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787340665, "uuid": "ca710f60-bfae-4d56-a5a3-709c6e0cf254", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787340665, "uuid": "71254ee9-7b5d-4f0a-83ff-37cb132d9810", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bc0b149-9d9a-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787342278, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787342278, "uuid": "3d88262c-5a1e-40bd-bf3c-2bc97e7a7a96", "comment": "Malware payload (Mirai)", "value": "b30c6c5bf0e78d015b94d54d615b3493", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787342278, "uuid": "04edb76f-df89-49c6-834d-0c7a55aed434", "comment": "Malware payload (Mirai)", "value": "aebb7c62d6a2f548b17be47de0f1e774b07d3185b320dcbd18e380e125ba772e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787342278, "uuid": "d1041996-2c46-43ee-bee0-0dd17294596b", "value": "T1CB04BF9BF20B1C50D86006F41FCB5B9C3AE761054D6BE9E36C3E763A29375DA290A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787342278, "uuid": "50b9ee1e-0b1d-441c-b6fc-1cac128be99f", "value": "3072:77QTwS6EroeYXeiPbdNIce1IKPc4IXkxBDTz9qgHCXBNNazLpHsCq:4kS6ELL0t4/POYBD/9zCXBN+rq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787342278, "uuid": "f2d244b6-36c5-4c0a-9533-d7c3242b170e", "value": 181744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787342278, "uuid": "f3cd4143-3e58-4556-bd43-f2e707d5ee85", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f82df4b5-9d9e-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787344151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787344151, "uuid": "c89fd092-626b-45f3-879a-96571753612e", "comment": "Malware payload", "value": "654499001421097393c8a4da3e975f6e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787344151, "uuid": "dcbedd11-f58a-41b4-856d-d79e6f56cf36", "comment": "Malware payload", "value": "9b4521c28174edd5c494d755ce01d0d9f045bbefab4f5506c5417cb8d78511f8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787344151, "uuid": "5e306776-c603-4704-8207-0664038764ec", "value": "T14CC1737AA804CD4BEC61BD49003EBE3A54CD887B56A5CD7C96DCCE1906125BA2F91D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787344151, "uuid": "4232e824-e46e-4dbd-b461-1a111a3ebb65", "value": "96:ERyQMPOaYosLvnK0ggucL9tcW2wBu7cg1xqzcfxmbcfEWtacTKEoouW:bQUORomnrD2CgnqzcJmQXmoD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787344151, "uuid": "ca6ed704-7311-4f8e-aa29-475068080842", "value": 5898, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787344151, "uuid": "5fff5063-6ae8-4f8a-b999-833f126624d0", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41475a62-9da0-11f1-8686-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1787344704, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787344704, "uuid": "bb24cdb9-c8ba-4613-b161-fb190deca5f4", "comment": "Malware payload (Mirai)", "value": "7b05b8dc468e009314fcf4a2c1e11092", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787344704, "uuid": "5cc45759-bb0f-49d0-8d01-8b605a9f59fb", "comment": "Malware payload (Mirai)", "value": "34e511ff3dc026dd04f2de64e23ffd6f5fda98e3932770fce1894a6bfc6401c3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787344704, "uuid": "f7ba8e3e-e841-40ad-abe7-1ea1e6e6b52f", "value": "T11A73020C60C63587CD7F0DBA51F19BF945861CB0626B860EA30447C87A2A2EE79DFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787344704, "uuid": "035d86c8-bac3-497b-aff9-ab34f6b509bc", "value": "1536:krhwnUf0g2DeKgy7UT4nMcZKMGiagLknvUmwJDGqpOu:vUQ5x84nbIMGiagovtwJDGqpOu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787344704, "uuid": "e9087750-6a98-43ef-b232-4321325e9cdf", "value": 78480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787344704, "uuid": "b953d2e2-1a85-492b-9fd2-16dc66f37fad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43496ee3-9da1-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787345136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787345136, "uuid": "7fe0e50b-d2f9-483d-8488-15978071db9d", "comment": "Malware payload", "value": "6121ab3a7d1449f24971bd16dd854126", "object_relation": "md5", "Tag": [ { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AveMariaRAT", "colour": "#c75060", "exportable": true, "hide_tag": false }, { "name": "d52f85", "colour": "#0e6ffb", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemusStealer", "colour": "#ddd7e0", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787345136, "uuid": "26fa72bb-7d7c-405b-a8be-2447741003eb", "comment": "Malware payload", "value": "94bff010123a54c1435a63862e802c6a59d821be7d5ee0898f30b7dd83cef5b8", "object_relation": "sha256", "Tag": [ { "name": "ArkeiStealer", "colour": "#6ca1b9", "exportable": true, "hide_tag": false }, { "name": "AveMariaRAT", "colour": "#c75060", "exportable": true, "hide_tag": false }, { "name": "d52f85", "colour": "#0e6ffb", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemusStealer", "colour": "#ddd7e0", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787345136, "uuid": "3def9f53-92fe-4e87-bc04-9c9b36bdef42", "value": "T1CBD40105B79750ECE2678935C8194226FBBB3E5543109B3F03A1C672BF126A0BE29F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1787345136, "uuid": "000ecd9d-f406-454e-8c08-9dfd3f2e353b", "value": "905d6e2fd95bb9d68bb959ec7e8cfb12", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787345136, "uuid": "bd18df64-9a50-4ab4-a1b9-dbe6df66b4ad", "value": "12288:oVrlIxMXCNtBBWkk0mE0ZAgo7J5vWmSS+GmbO9F5xqLYGeiKG+v:PxMSNtw5ER5DumSSMiF5rGe3G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787345136, "uuid": "c3035018-141c-461f-836c-6c2cd7045ac8", "value": 640000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787345136, "uuid": "8a52efc9-afb9-4a88-93ce-7f836c024dd4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "705b84c8-9da5-11f1-8686-82aee05be84a", "comment": "Malware payload", "timestamp": 1787346930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787346930, "uuid": "c0556446-e038-4465-a65e-244178cbe23d", "comment": "Malware payload", "value": "dd10bf730b7ed176ddfdd665463a0a61", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787346930, "uuid": "2bf040dc-6261-4000-b4fe-11e586917dd3", "comment": "Malware payload", "value": "b7931edb7bce9710065d14c009e61b58e5f06f9a67c74779980b39faa92f72c7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787346930, "uuid": "c513f299-1b9a-4322-8f57-3b1cfce36e89", "value": "T1D5132944B3F852A2E1FF0F756EB241454BB1B5536E32CB5E08EA448A1EB379489127", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787346930, "uuid": "bba8b83f-67ad-463e-9bd1-faf61a05b88b", "value": "768:E8xQcAc7TYcvjWrWCiRQ9YoFqRrjlVNCTsBu0ne3NUdKMhn:E8pn7MWCCCiRLdR3748wNUdKI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787346930, "uuid": "7df5b1d5-78f7-478c-a467-089a0de604e9", "value": 45056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1787346930, "uuid": "05863387-1697-4105-8dce-93007cf02698", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1787347340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1787347340, "uuid": "fcd407ef-916a-48e8-9f40-1d040a645c07", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1787347340, "uuid": "bf5d6dca-6231-4858-aa69-21715f8de916", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1787347340, "uuid": "4870858f-a802-4b99-8946-da1badbc298c", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1787347340, "uuid": "ab22ab09-ce78-44bc-8e23-5af439c0b372", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1787347340, "uuid": "4bb89af8-3af7-44d1-9fcd-7bf17aa7077a", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787270781, "uuid": "23d7653d-9cf4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.103.64:50547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787270840, "uuid": "46f8e4f9-9cf4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.254.164:39916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787270901, "uuid": "6b52c068-9cf4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.18.27:46218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271199, "uuid": "1cfcf46d-9cf5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.212.119:800/arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "8abee97d-9cf5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.212.119:800/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "8ac2c3e1-9cf5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.212.119:800/i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "8ad5f869-9cf5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.212.119:800/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "8ad94d09-9cf5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.212.119:800/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "8ad9731f-9cf5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.212.119:800/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "8ae1ee81-9cf5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.212.119:800/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "8ae6b265-9cf5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.212.119:800/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "8af2a629-9cf5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.212.119:800/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "8af331cd-9cf5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.212.119:800/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "8b0d9bda-9cf5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.212.119:800/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "8b0d9da7-9cf5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.212.119:800/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "8b0e68cc-9cf5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.212.119:800/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787271383, "uuid": "8b0e7030-9cf5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.212.119:800/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787273540, "uuid": "908b67e8-9cfa-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.154.212:42250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787273543, "uuid": "92493ff4-9cfa-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.210.253:44599/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787273662, "uuid": "d920f122-9cfa-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.217.161.106:41462/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787274071, "uuid": "ccc027be-9cfb-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.113.166.57:59924/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787274202, "uuid": "1ae6ffe8-9cfc-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.154.212:42250/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787274863, "uuid": "a4d1751e-9cfd-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.100.50:44024/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787275039, "uuid": "0de220cd-9cfe-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.100.50:44024/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787275399, "uuid": "e4aa4ab7-9cfe-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.3.106:49988/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787275522, "uuid": "2e0e7478-9cff-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.163.212.119:800/lilin.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787275701, "uuid": "98ae49bf-9cff-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.162.45:59164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787275941, "uuid": "27c9247f-9d00-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://93.113.166.57:59924/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787277985, "uuid": "ea326871-9d04-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.84.138:35880/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787278166, "uuid": "5609c487-9d05-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.3.106:49988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787279838, "uuid": "3a2de1e6-9d09-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.97.100.192:59504/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787280139, "uuid": "ed83472c-9d09-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.84.138:35880/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787284458, "uuid": "fbe7f027-9d13-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.108.130:33716/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787284474, "uuid": "05cd7665-9d14-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.162.38.51:34372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787285121, "uuid": "8794c3fd-9d15-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.20.246:39870/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787285242, "uuid": "cf67364b-9d15-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.201.235:59633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787285365, "uuid": "18793277-9d16-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.25.157.124:39654/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787285417, "uuid": "37be26ae-9d16-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.163.117:50795/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787286926, "uuid": "bb134888-9d19-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.163.117:50795/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787288730, "uuid": "ee87e5db-9d1d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.219.153:60517/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787291304, "uuid": "ecc46aa8-9d23-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.123.78:39336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787292263, "uuid": "28656cbc-9d26-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.74.60:46830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787292613, "uuid": "f89f36eb-9d26-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.123.78:39336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787292969, "uuid": "ccf1d042-9d27-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://gaiadeqi.com/vlc.zip", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787293337, "uuid": "a8236eb9-9d28-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.74.60:46830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787293566, "uuid": "3131ce38-9d29-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://pulgarinrealtor.com/weds/crypted.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787293751, "uuid": "9f50ed9a-9d29-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://coconutoficial.com.br/image/stego_3d5qe0layt.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787293992, "uuid": "2eae1357-9d2a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://brightwatch.mypi.co/AdobePDF.bat", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787293994, "uuid": "3014ac4f-9d2a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://brightwatch.mypi.co/Adobeinstaller.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787294357, "uuid": "08658c49-9d2b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.182.116:42583/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787294827, "uuid": "209e8bec-9d2c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.78.182.86:43103/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787294835, "uuid": "257b2722-9d2c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.255.31.48:59678/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295195, "uuid": "fc105933-9d2c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.219.218:37565/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295196, "uuid": "fc8d6157-9d2c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.44.156.36:37033/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295246, "uuid": "1a838b98-9d2d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Orukemer/success/refs/heads/main/eSrdgmg.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295247, "uuid": "1ab2998c-9d2d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Orukemer/image/releases/download/Image/3.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295248, "uuid": "1b6421f3-9d2d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Orukemer/mercy/refs/heads/main/gIrhnSb.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295308, "uuid": "3f44b5bd-9d2d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.225.135.160/downloads/3.jpg", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295545, "uuid": "ccadbd50-9d2d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_3dd10d441773a7d5.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295548, "uuid": "ce616c67-9d2d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_3b3bcb0313f73fb0.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295608, "uuid": "f23cc445-9d2d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh", "Tag": [ { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295609, "uuid": "f2980528-9d2d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://86.109.75.161:8080/lin1948WEx", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295609, "uuid": "f2b9996a-9d2d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_542ee73385a72661.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295619, "uuid": "f8bb9bb4-9d2d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.123.98.99:33747/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787295985, "uuid": "d2fd14a0-9d2e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.208.111.36:53831/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787296026, "uuid": "eb31f25e-9d2e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.75.58:44319/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787296032, "uuid": "eea3842e-9d2e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.44.156.36:37033/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787296211, "uuid": "5937e562-9d2f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://krem.mesoptik.com/static/modules/rh_TmgDpQ.bin", "Tag": [ { "name": "TELEPUZ", "colour": "#87671d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787296267, "uuid": "7aa61cad-9d2f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://krem.mesoptik.com/static/modules/nzX44SVMY.bin", "Tag": [ { "name": "TELEPUZ", "colour": "#87671d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787296327, "uuid": "9e8c4bd6-9d2f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://colibrik.com/vlc.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787296328, "uuid": "9eee9bf1-9d2f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.81.174:41032/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787296567, "uuid": "2dead5d5-9d30-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.78.182.86:43103/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787297059, "uuid": "53182cda-9d31-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.233.94.135:35449/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787297360, "uuid": "06831867-9d32-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.233.94.135:35449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787297895, "uuid": "45553591-9d33-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.163.107.242:56229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298429, "uuid": "83a68c62-9d34-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://159.255.31.48:59678/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298845, "uuid": "7b757947-9d35-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.192.81.41:8080/arm", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298845, "uuid": "7b77ee10-9d35-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.192.81.41:8080/arm5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298845, "uuid": "7b782e48-9d35-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.192.81.41:8080/mpsl", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298845, "uuid": "7b7843cd-9d35-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.192.81.41:8080/arm7", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298845, "uuid": "7b78594d-9d35-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.192.81.41:8080/m68k", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298845, "uuid": "7b7971a6-9d35-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.192.81.41:8080/x86_32", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298845, "uuid": "7b84df2a-9d35-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.192.81.41:8080/ppc440", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298845, "uuid": "7b86f751-9d35-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.192.81.41:8080/mips", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298845, "uuid": "7b927fb5-9d35-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.192.81.41:8080/sh4", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298845, "uuid": "7b94ea52-9d35-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.192.81.41:8080/arm6", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298845, "uuid": "7b951841-9d35-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.192.81.41:8080/x86", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298845, "uuid": "7b961b7a-9d35-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.192.81.41:8080/x86_64", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787298845, "uuid": "7ba41c1e-9d35-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.192.81.41:8080/ppc", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787299223, "uuid": "5cd0f09f-9d36-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.152.10.88:45145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787299594, "uuid": "3a047f6e-9d37-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.189.234:48747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787299824, "uuid": "c329abd0-9d37-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.4.133:60713/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d6388bba-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/24dc12", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d63dd757-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/b7a381", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d63f5e17-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/adb88f", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d640c7df-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/29ea88", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d6464aca-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/b6973a", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d647a4aa-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/85a4f4", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d648a1f3-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/ba641b", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d648b7ab-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/846cac", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d649adbe-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/50edcc", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d6504a3f-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/5a848f", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d650b35a-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/ae9a6b", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d676516f-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/d19a37", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d676541e-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/d97308", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d676c521-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/6ef423", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d6770547-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/7202b4", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d67770d7-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/90e1de", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d677e0bb-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/b4af73", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d6782a09-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/08040b", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d678721b-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/8a90f5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d6787738-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/79743e", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d6789a77-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/74d9f9", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d67c2726-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/c060bd", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d67c3f59-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/aede8d", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d68d23f7-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/370ef8", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d68ddab2-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/1294b8", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d69289da-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/f82d25", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d692d80f-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/797dff", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d692fc99-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/e04f45", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d69310d3-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/597d4b", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d6939c78-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/a0ec06", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d693cc83-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/14acdf", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d6979723-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/d834af", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300286, "uuid": "d69a44ab-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/982cd0", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300287, "uuid": "d6b2ef3a-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/b87566", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300287, "uuid": "d6bede3e-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/e7b8f7", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300287, "uuid": "d6bee65d-9d38-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/b8b233", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787300774, "uuid": "f90b34f6-9d39-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.152.10.88:45145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787301245, "uuid": "1232fe2f-9d3b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://tmpfiles.org/dl/1787161037.c81e7dba2550050a/wXw6relOYfKE/msi_pro.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787301310, "uuid": "3876a44e-9d3b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://kee126.com/vlc.zip", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787302097, "uuid": "0df812d0-9d3d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.209.153:51945/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787302169, "uuid": "38f22e0e-9d3d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.118.232:57819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787302330, "uuid": "98e68ef7-9d3d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.92.221:44835/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787302407, "uuid": "c663e587-9d3d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.36.34:39539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787302926, "uuid": "fc1ad5f3-9d3e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://pulgarinrealtor.com/crypted.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787302932, "uuid": "ffb5a05e-9d3e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://onlypackaging.grupoinde.com/zz/crypted.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "AveMariaRAT", "colour": "#c75060", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303166, "uuid": "8ae8681d-9d3f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/699b25", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303166, "uuid": "8ae8759d-9d3f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/89e244", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303166, "uuid": "8af4d99b-9d3f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/e3530c", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303166, "uuid": "8aff1c51-9d3f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/3eaa22", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303166, "uuid": "8aff1fdb-9d3f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/7d4dfe", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303166, "uuid": "8aff25e4-9d3f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/efeb39", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303166, "uuid": "8aff28f4-9d3f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/4c7cb5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303166, "uuid": "8b071a8d-9d3f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/bfe63f", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303166, "uuid": "8b0f16da-9d3f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/acaa53", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303166, "uuid": "8b0fb349-9d3f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/905a41", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303166, "uuid": "8b105001-9d3f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/58e1a8", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303166, "uuid": "8b1d42e4-9d3f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/74346a", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303527, "uuid": "61e480ba-9d40-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.36.34:39539/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787303530, "uuid": "63b23989-9d40-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.87.135:47543/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787304425, "uuid": "799f8790-9d42-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://tmpfiles.org/wXw6relOYfKE/msi_pro.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787304485, "uuid": "9d26428c-9d42-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.177.94.139/Xloadfile/bin.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787304548, "uuid": "c27ce69d-9d42-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://colibrik.com/vlccz.zip", "Tag": [ { "name": "MassLogger", "colour": "#0de593", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787304862, "uuid": "7de07857-9d43-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.240.192:35535/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787305467, "uuid": "e66c6391-9d44-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.10.162:57743/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306243, "uuid": "b53767bc-9d46-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.63.144:39989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306294, "uuid": "d340c944-9d46-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.240.192:35535/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306473, "uuid": "3df097eb-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.94.187:45764/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306473, "uuid": "3e2f253f-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.157.243.235:47252/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306473, "uuid": "3e31ba31-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.94.187:45764/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3e73cf5a-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.111.88:33491/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3e918bad-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.130.28:47551/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3ea1d43b-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.26.85:51916/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3eb3022f-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.234.61.90:34549/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3eb72dd6-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.49.161:56955/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3ec70696-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.28.108:53934/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3ec8de9a-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.234.61.90:34549/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3edab7f4-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.49.161:56955/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3ee33009-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.130.209.58:35031/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3ee59e8a-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.15.53:45156/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3ee5a586-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.206.146:52728/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3ee60b56-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.163.85.239:39124/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3ee64a01-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.188.75.58:44319/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3ee69ffa-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.206.146:52728/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3ee6a6c3-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.15.53:45156/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3ee7b9a7-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.28.108:53934/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3ef26b31-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.184.140.145:34890/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3ef943cc-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.171.234:44993/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306474, "uuid": "3ef94ccb-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.179.4.180:60816/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306475, "uuid": "3efa785b-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.45.124:57472/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306475, "uuid": "3f0fa4f1-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.148.182:60566/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306475, "uuid": "3f141199-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.171.234:44993/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306475, "uuid": "3f3c7f0e-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.140.235:50010/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306475, "uuid": "3f3fa68a-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.75.38.154:4194/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306475, "uuid": "3f55cd02-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.140.235:50010/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306477, "uuid": "40a0d21d-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.159.187.179:34226/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306477, "uuid": "40ad0575-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.159.187.179:34226/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306480, "uuid": "427ce46d-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.38.16.176:54968/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306482, "uuid": "4394c0b5-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.21.251.3:42743/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306486, "uuid": "45eb9dab-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.136.165:55956/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787306491, "uuid": "48872fd9-9d47-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.244.41.109:53440/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787307029, "uuid": "895d089c-9d48-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.10.162:57743/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787307426, "uuid": "75d83355-9d49-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.224.231:49757/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787307726, "uuid": "29354289-9d4a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.49.187:35712/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "5255dea9-9d4b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/daredevil.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "5255e985-9d4b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/daredevil.armv6l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "525a9855-9d4b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/daredevil.mipsrouter", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "526dddcc-9d4b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/daredevil.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "5272bd42-9d4b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/a.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "5272dbf8-9d4b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/daredevil.arc", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "5276a0ea-9d4b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/daredevil.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "5276b3c9-9d4b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/daredevil.armv4l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "52783852-9d4b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/daredevil.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "527b51c6-9d4b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/daredevil.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308225, "uuid": "52804e3d-9d4b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/daredevil.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308273, "uuid": "6f416e08-9d4b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/daredevil.armv7l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308274, "uuid": "6fadcf51-9d4b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/daredevil.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308275, "uuid": "7000c0fe-9d4b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/daredevil.armv5l", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308276, "uuid": "70d26ce0-9d4b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.202/daredevil.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308633, "uuid": "454460f5-9d4c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.59.152:33986/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308711, "uuid": "73ea515b-9d4c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.219.153:60517/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787308930, "uuid": "f67eff17-9d4c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.49.187:35712/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787309480, "uuid": "3e50500b-9d4e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.182.114:59660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787310375, "uuid": "53d83d59-9d50-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.59.152:33986/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787310502, "uuid": "9fa1eda8-9d50-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.140.10:33110/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787310856, "uuid": "728e37e2-9d51-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://nimblenumbers.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311395, "uuid": "b3c46b19-9d52-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.182.114:59660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311396, "uuid": "b42b259f-9d52-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.79.131:52303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "6a4ece9f-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.181/bot.mips", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "6a4f90d5-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.181/bot.x86_64", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "6a55e2ec-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.181/bot.arm", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "6a5a2c63-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.181/bot.i686", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "6a61d02f-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.181/bot.aarch64", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "6a65cc93-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.181/bot.ppc", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "6a6a407d-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.181/bot.mipsel", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "6a6b4b0f-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.181/bot.arm7", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311701, "uuid": "6a6f3c4d-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.181/bot.sh4", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "b455d834-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.210/mpsl", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "b4566881-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.210/arm", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "b45675a6-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.210/sh4", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "b4567635-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.210/arm6", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "b45676d9-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.210/mips", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "b456798b-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.210/arm7", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "b4567da7-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.210/arc", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "b4568b3a-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.210/ppc", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311825, "uuid": "b464a338-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.210/adbpersist.arm7", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311826, "uuid": "b479147b-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.210/m68k", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311844, "uuid": "bf9a2202-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.235.87:40268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311877, "uuid": "d2d2e32d-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.210/spc", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787311879, "uuid": "d40a5d90-9d53-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.210/arm5", "Tag": [ { "name": "94-154-43-210", "colour": "#d279a3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "68c2f7ec-9d54-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.85/ppc64", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "68c84f39-9d54-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.85/x86", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "68c85855-9d54-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.85/amd64", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "68c85a5d-9d54-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.85/armv7l", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "68c86f78-9d54-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.85/mipsel", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "68cdbda4-9d54-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.85/i686", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "68e5ac46-9d54-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.85/armv6l", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312128, "uuid": "68e63778-9d54-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.85/mips", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312189, "uuid": "8d303006-9d54-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.43.85/armv5l", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312728, "uuid": "ce54007b-9d55-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.61.53.157:42588/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312768, "uuid": "e60cd475-9d55-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.159.90.118/bin/support.client.exe", "Tag": [ { "name": "203-159-90-118", "colour": "#11f398", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312769, "uuid": "e6edb6c9-9d55-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.159.90.118/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "203-159-90-118", "colour": "#11f398", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312827, "uuid": "094dd2ce-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_1319bd61568f04ed.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312827, "uuid": "095d8d98-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.42/bin/support.client.exe", "Tag": [ { "name": "192-159-99-42", "colour": "#77a17c", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312832, "uuid": "0c8dd589-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.159.99.42/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "192-159-99-42", "colour": "#77a17c", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312885, "uuid": "2c2a18e6-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/829f73", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312885, "uuid": "2c2a1aff-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/98fab6", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312885, "uuid": "2c2a25ae-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/005679", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312885, "uuid": "2c2a28af-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/61e952", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312885, "uuid": "2c2a29b6-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/c02601", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312885, "uuid": "2c2a3032-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/14f97a", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312885, "uuid": "2c2a4bb9-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/d81575", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312885, "uuid": "2c34d959-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/e0207d", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312886, "uuid": "2c4dec1a-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/0eede3", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312886, "uuid": "2c4df5b3-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/2cd0c9", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312886, "uuid": "2c4e03c7-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/70504f", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312886, "uuid": "2c69f4a6-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.182.210.174/197001", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312886, "uuid": "2cb96e5c-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://v-k.com.ua/vcapcha.ps1", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "clipboard", "colour": "#2ef130", "exportable": true, "hide_tag": false }, { "name": "fake_verify", "colour": "#f38d3d", "exportable": true, "hide_tag": false }, { "name": "run_dialog", "colour": "#1c4d92", "exportable": true, "hide_tag": false }, { "name": "shell_payload", "colour": "#89a728", "exportable": true, "hide_tag": false }, { "name": "stage2", "colour": "#ef47a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787312888, "uuid": "2dc6da92-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_9a5c49da1d9d1767.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "RemusStealer", "colour": "#ddd7e0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787313010, "uuid": "765c50ad-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.180/bin/support.client.exe", "Tag": [ { "name": "94-154-32-180", "colour": "#709ad2", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787313012, "uuid": "7787c7c4-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.154.32.180/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "94-154-32-180", "colour": "#709ad2", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787313068, "uuid": "98bb7656-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.68/bin/support.client.exe", "Tag": [ { "name": "94-154-32-68", "colour": "#4b6d1c", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787313069, "uuid": "999f7550-9d56-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.68/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "94-154-32-68", "colour": "#4b6d1c", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787313309, "uuid": "28b30b86-9d57-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.205/Bin/ScreenConnect.ClientSetup.exe", "Tag": [ { "name": "94-154-32-205", "colour": "#7a7e0d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787313309, "uuid": "28bcd259-9d57-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://94.154.32.205/bin/support.client.exe", "Tag": [ { "name": "94-154-32-205", "colour": "#7a7e0d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787314100, "uuid": "002d6be2-9d59-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.55.26.114:46700/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787314157, "uuid": "21d41b94-9d59-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.189.234:48747/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787314928, "uuid": "edbaeff0-9d5a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.94.220:54475/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787315603, "uuid": "801a7f5f-9d5c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.20.246:39870/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787315645, "uuid": "993b1b41-9d5c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/spamget.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787315648, "uuid": "9adacb72-9d5c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.244.196:59371/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787315664, "uuid": "a4410d07-9d5c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.208.46:56903/Mozi.a", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787316673, "uuid": "fdacc6c9-9d5e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.144.211:51836/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787317224, "uuid": "46050787-9d60-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.244.196:59371/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787317226, "uuid": "476e514a-9d60-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.237.221:39602/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787318055, "uuid": "35337f86-9d62-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.87.19:46712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787319137, "uuid": "ba5682bd-9d64-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.236.65.230:33052/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787319192, "uuid": "db2e52a3-9d64-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.236.65.230:33052/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787319380, "uuid": "4b21d5b4-9d65-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.158.83:45555/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787319445, "uuid": "72487edd-9d65-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.61.46.143:53645/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787319919, "uuid": "8cc2324e-9d66-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.194.179.106:52016/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787320867, "uuid": "c19be4b5-9d68-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.235.202:51478/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787320887, "uuid": "cd3ede1c-9d68-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.201.178.159:48639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787321180, "uuid": "7c2ab105-9d69-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.158.83:45555/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787321545, "uuid": "5590c082-9d6a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.194.179.106:52016/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787321570, "uuid": "6477dcda-9d6a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.4.254.241:52598/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787322754, "uuid": "2694de38-9d6d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.82.102:41542/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787323045, "uuid": "d3edd821-9d6d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.251.126:60468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787323408, "uuid": "ac3fdd75-9d6e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.112.59.91:60395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787324725, "uuid": "bd674c4c-9d71-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.137.251.126:60468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787326768, "uuid": "7eab7e24-9d76-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.168.20.218:18081/f8YlUiZDcEOZ", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787327900, "uuid": "21a609ba-9d79-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.64.122:48159/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787328380, "uuid": "3fda42ab-9d7a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.112.59.91:60395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787329096, "uuid": "ea5b1177-9d7b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.64.122:48159/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787330599, "uuid": "6a1ff4b3-9d7f-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.25.94:37532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787332210, "uuid": "2a947fbb-9d83-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.236/files-129312398/files/file_47648acbd9943ebf.exe", "Tag": [ { "name": "54e64e", "colour": "#eb829a", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787333361, "uuid": "d8a16519-9d85-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.166.85:34514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787334009, "uuid": "5ae36614-9d87-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.166.85:34514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787334968, "uuid": "9638ef2d-9d89-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.208.16.203:3588/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787334969, "uuid": "96e19d98-9d89-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.208.16.203:3588/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787335464, "uuid": "be0dce2b-9d8a-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.60.37:49335/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787335641, "uuid": "27908101-9d8b-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.243.79:60816/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787336053, "uuid": "1d137390-9d8c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.51.119:37449/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787336053, "uuid": "1d2d108e-9d8c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.51.119:37449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787336478, "uuid": "1a9ecdb1-9d8d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.192.234.145:55381/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787338095, "uuid": "ddfa1583-9d90-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.192.234.145:55381/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787338219, "uuid": "284acec1-9d91-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.103.199:46495/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787339173, "uuid": "60fab304-9d93-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.103.199:46495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787340671, "uuid": "dd91b77b-9d96-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://threedrows.net/uploads/cl1786993325591.exe", "Tag": [ { "name": "6efb1e0ab361cda1dd534e37e543789c", "colour": "#8bcc23", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787341459, "uuid": "b37d1863-9d98-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.15.117.156:37936/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787341567, "uuid": "f3df8e4f-9d98-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.117.213:54917/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787343193, "uuid": "bcec22e4-9d9c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.117.213:54917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787343255, "uuid": "e1e88761-9d9c-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.15.117.156:37936/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787343667, "uuid": "d7a3e00b-9d9d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.177.126:57685/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787343667, "uuid": "d7b4161f-9d9d-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.162.45:59164/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787344150, "uuid": "f747fa7c-9d9e-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "https://mon-blanc-04.cfd/installer.exe", "Tag": [ { "name": "974b6b4ed30ddaa4b6f4ec27976e52d8", "colour": "#966df1", "exportable": true, "hide_tag": false }, { "name": "dropped-by-remus", "colour": "#7e486b", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787345175, "uuid": "5a7ea011-9da1-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.158.197.238:53233/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787345854, "uuid": "ef1ff136-9da2-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.60.89:60712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787346185, "uuid": "b443e013-9da3-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.140/files/7154708060/EcHFKBJ.exe", "Tag": [ { "name": "d52f85", "colour": "#0e6ffb", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787346669, "uuid": "d48f031a-9da4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.158.197.238:53233/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787347341, "uuid": "652f126e-9da6-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.30.116:41163/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787347395, "uuid": "8558cdb6-9da6-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.108.90.55:37440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787348783, "uuid": "c0e13a91-9da9-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.30.116:41163/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787349124, "uuid": "8c1bc580-9daa-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.140/files/6680549914/ENKpzg6.exe", "Tag": [ { "name": "d52f85", "colour": "#0e6ffb", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787349139, "uuid": "9520e97e-9daa-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.163.131:49762/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787349142, "uuid": "96ca85ff-9daa-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.108.90.55:37440/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787349313, "uuid": "fc8551f7-9daa-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.127.198:37040/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787350327, "uuid": "58e7ac2f-9dad-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.214.165:40665/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787351173, "uuid": "5129ecd0-9daf-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.183.167:47451/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787351353, "uuid": "bcc5801e-9daf-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.158.53:41696/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787352325, "uuid": "ffc4d5b5-9db1-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.20.77:59128/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787353411, "uuid": "873351cc-9db4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.228.132.133:38637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787353520, "uuid": "c88acdca-9db4-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.158.53:41696/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787353822, "uuid": "7c1cbe90-9db5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.108.78:35117/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787353999, "uuid": "e5b2b579-9db5-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.15.213:35530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787354898, "uuid": "fd85eab6-9db7-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.227.126:60165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787355864, "uuid": "3d616950-9dba-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.20.77:59128/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1787355991, "uuid": "891514b6-9dba-11f1-8686-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.108.78:35117/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787345165, "uuid": "54396c71-9da1-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.158.197.238", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306226, "uuid": "aad5da1d-9d46-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.63.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787285406, "uuid": "30ea7857-9d16-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.163.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787299565, "uuid": "28a901ce-9d37-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.189.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295606, "uuid": "f0f65e26-9d2d-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.123.98.99", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787345824, "uuid": "dd32a835-9da2-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.60.89", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787330585, "uuid": "61c5dd61-9d7f-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.25.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787310484, "uuid": "95040121-9d50-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.140.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787349305, "uuid": "f817f06f-9daa-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.127.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787353384, "uuid": "777c84ad-9db4-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.228.132.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787319905, "uuid": "845ef4ef-9d66-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.194.179.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320865, "uuid": "c02a44d0-9d68-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.201.178.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787327884, "uuid": "17e45248-9d79-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.64.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787274844, "uuid": "99b13f71-9cfd-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.100.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787353806, "uuid": "72fb0d69-9db5-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.108.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787314085, "uuid": "f6fc5b6d-9d58-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.55.26.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787322726, "uuid": "15db0c77-9d6d-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.26.82.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787351344, "uuid": "b7357286-9daf-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.132.158.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787309466, "uuid": "35cbd2ce-9d4e-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.132.182.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787347325, "uuid": "5bd8e84c-9da6-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.30.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787333346, "uuid": "cf5c6d34-9d85-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.131.166.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787271184, "uuid": "1431d685-9cf5-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.163.212.119", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787288705, "uuid": "df8ac444-9d1d-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.234.219.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787323384, "uuid": "9e1be909-9d6e-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.112.59.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787317206, "uuid": "3bbd08a1-9d60-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.237.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787270885, "uuid": "61cef163-9cf4-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.18.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787305446, "uuid": "d9dd46b0-9d44-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.10.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787308626, "uuid": "416323a2-9d4c-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.59.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787303525, "uuid": "60e8f339-9d40-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.87.135", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787302085, "uuid": "0674a1d3-9d3d-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "130.12.209.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787294825, "uuid": "1f35bdf8-9d2c-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "159.255.31.48", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787318045, "uuid": "2f467b21-9d62-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.87.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787302326, "uuid": "9619b1a6-9d3d-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.92.221", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787314925, "uuid": "ebdb0a4c-9d5a-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.94.220", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787273525, "uuid": "878a531e-9cfa-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.107.210.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787335625, "uuid": "1de0ab0e-9d8b-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.243.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787343665, "uuid": "d5fcca6b-9d9d-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.177.126", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787292245, "uuid": "1d74e155-9d26-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.151.74.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787335444, "uuid": "b236a02e-9d8a-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.60.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295185, "uuid": "f5c6c00d-9d2c-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.44.156.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787285106, "uuid": "7e11200e-9d15-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.20.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787352306, "uuid": "f4c43b7f-9db1-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.20.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787349124, "uuid": "8c036823-9daa-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.163.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787277965, "uuid": "ddbbae9d-9d04-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.84.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39d5c533-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.244.41.109", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39dfeb9c-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.159.187.179", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312824, "uuid": "0780c9ef-9d56-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.159.99.42", "Tag": [ { "name": "192-159-99-42", "colour": "#77a17c", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312765, "uuid": "e4511d46-9d55-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.159.90.118", "Tag": [ { "name": "203-159-90-118", "colour": "#11f398", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39d8fb01-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "211.75.38.154", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787336465, "uuid": "12774429-9d8d-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.192.234.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787302385, "uuid": "b99aa6a2-9d3d-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.36.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787350325, "uuid": "579fd1ac-9dad-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.214.165", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787296324, "uuid": "9cdeeae9-9d2f-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.81.174", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39da2123-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.94.187", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787315645, "uuid": "990b9032-9d5c-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.244.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787299206, "uuid": "52c1537a-9d36-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.152.10.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787291285, "uuid": "e139829a-9d23-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.123.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787273645, "uuid": "cedd2138-9cfa-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.217.161.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787321524, "uuid": "494a55d9-9d6a-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.4.254.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311807, "uuid": "a9524e36-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.235.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787294825, "uuid": "1f35e661-9d2c-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.78.182.86", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787338205, "uuid": "1fc030e8-9d91-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.103.199", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787294344, "uuid": "00938ff8-9d2b-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.182.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39de137c-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.45.124", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39e8055f-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.179.4.180", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787353985, "uuid": "dd666d57-9db5-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.15.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311386, "uuid": "ae3b5673-9d52-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.79.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39d88ffc-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.140.235", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39d88b12-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.171.234", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787351166, "uuid": "4cff0ad4-9daf-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.183.167", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787307724, "uuid": "27bb425f-9d4a-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.49.187", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39e9d00c-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.148.182", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787270764, "uuid": "1a26a75c-9cf4-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.254.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39d65787-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.206.146", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39eaa1cd-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.15.53", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787320865, "uuid": "c02a4800-9d68-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.235.202", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39e8a6e2-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.28.108", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39d79049-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.163.85.239", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295306, "uuid": "3dfb4dfd-9d2d-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.225.135.160", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787334964, "uuid": "9433eb1e-9d89-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.208.16.203", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39d86b54-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.21.251.3", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39e1f9f3-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.136.165", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787316665, "uuid": "f8b1e3f7-9d5e-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.144.211", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787284445, "uuid": "f46134bd-9d13-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.162.38.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787323025, "uuid": "c8063d96-9d6d-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.137.251.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787326746, "uuid": "71e72f1d-9d76-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "68.168.20.218", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787285345, "uuid": "0ca98314-9d16-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.25.157.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787341444, "uuid": "aab5d42d-9d98-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.15.117.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787295606, "uuid": "f0f638a0-9d2d-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "86.109.75.161", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39d6eba4-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.157.243.235", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787298844, "uuid": "7b21e472-9d35-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.192.81.41", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787306466, "uuid": "39d6e0f2-9d47-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.234.61.90", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787274064, "uuid": "c90ac284-9cfb-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "93.113.166.57", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313006, "uuid": "73c9f442-9d56-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.180", "Tag": [ { "name": "94-154-32-180", "colour": "#709ad2", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313305, "uuid": "26842d05-9d57-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.205", "Tag": [ { "name": "94-154-32-205", "colour": "#7a7e0d", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787313064, "uuid": "96bb2e7f-9d56-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.32.68", "Tag": [ { "name": "94-154-32-68", "colour": "#4b6d1c", "exportable": true, "hide_tag": false }, { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787311685, "uuid": "60900b3d-9d53-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.43.181", "Tag": [ { "name": "94-154-43-181", "colour": "#81ce69", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1787312106, "uuid": "5b559c39-9d54-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "94.154.43.85", "Tag": [ { "name": "94-154-43-85", "colour": "#f9ad37", "exportable": true, "hide_tag": false }, { "name": "DDoSAgent", "colour": "#145377", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787293986, "uuid": "2afb5666-9d2a-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "brightwatch.mypi.co" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787293747, "uuid": "9cfa5cc4-9d29-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "coconutoficial.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787296324, "uuid": "9ceb24f5-9d2f-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "colibrik.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787301307, "uuid": "36adea49-9d3b-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "kee126.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787296207, "uuid": "56c5e2c2-9d2f-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "krem.mesoptik.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787344145, "uuid": "f441a9e6-9d9e-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "mon-blanc-04.cfd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787310844, "uuid": "6b72c584-9d51-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "nimblenumbers.screenconnect.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787302927, "uuid": "fcb48b31-9d3e-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "onlypackaging.grupoinde.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1787293566, "uuid": "30d8461d-9d29-11f1-8686-82aee05be84a", "comment": "Malware payload delivery host", "value": "pulgarinrealtor.com" } ] } }