{ "Event": { "published": true, "date": "2026-03-16", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-16", "timestamp": 1773706523, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "2eef3c51-c6fd-4fa5-a099-5cea4965f7a1", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1773619513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773619513, "uuid": "95995f1c-a385-45d2-bcab-e6bd3bdc8557", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773619513, "uuid": "031edea6-237b-4e0e-9a44-590c6254492d", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773619513, "uuid": "d202aef8-3ce0-4d01-8580-c22f52dd853c", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773619513, "uuid": "b17aa2d7-5702-4757-b31e-3d9b7ce30439", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773619513, "uuid": "f929de33-6c3c-4256-b0f5-c69c41793f62", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773619514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773619514, "uuid": "19c450a4-b94f-4a2c-b1ea-bbb8e56eeea6", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773619514, "uuid": "8c0422bb-65be-4dd5-8328-5f99f8ee3dc5", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773619514, "uuid": "5e5d14b0-80f8-493f-8423-9dfaf37c615b", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773619514, "uuid": "ea07f69f-987f-4fdc-b582-2066ff946809", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773619514, "uuid": "0b52e797-ba8e-4a63-b958-6b6522f2daf9", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773622332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773622332, "uuid": "605edc2f-9ade-4a59-aca8-de1ab016ce4c", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773622332, "uuid": "86d15097-65c2-430e-84b8-79f5b62b322f", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773622332, "uuid": "53cd68f1-ab1e-4bd9-9728-10764171129c", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773622332, "uuid": "8d81a144-70a5-48ee-a858-94e3a0ea9606", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773622332, "uuid": "0d3a1170-447a-4579-a452-4f152716a49c", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1773623053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773623053, "uuid": "d0e4c16f-8b23-41b8-8e93-32092de34eaa", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773623053, "uuid": "6934cdbc-1e8e-4a0f-92d5-bcc5c263cb2d", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773623053, "uuid": "3bee671f-3dbe-47dd-b5fd-f1cd1aac39b7", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773623053, "uuid": "0304eab2-8c04-462e-955c-2022aa91a43c", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773623053, "uuid": "a4ef75b5-2c3f-48f3-88bb-43db8eaa4572", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f53a8087-20d7-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773624732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773624732, "uuid": "d9d3fe57-d923-4ccc-878a-c644b2737224", "comment": "Malware payload", "value": "89690c0a6dcfb0b1e81e1cf183cd7f7b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773624732, "uuid": "f4eaa03c-ca37-4f39-b567-8c2743cb19c2", "comment": "Malware payload", "value": "0e56945cdb4b2754b47bdd1371331707c0fe7c42753c4846ba18dd33a7a58c88", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773624732, "uuid": "72bb70ff-c20c-4b99-9713-14d83d0e2d67", "value": "T1B7D3195F93FA317571178359F9E6772492ACC133EA420EE2F8B6865C8FC066201B72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773624732, "uuid": "abaf81e5-d934-4e10-a5b5-43544161489c", "value": "3072:Qjl4k2wwH4UsFufxQB/r4KIIinxtPh6I7W4Kxk1w75PFBJFQskutIxYDEePCJl7R:Cl4kCH4UsFufxQB/r4KIIinxtPh6I7W6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773624732, "uuid": "192be351-fe91-414b-b119-7db226b8b7e3", "value": 133568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773624732, "uuid": "ee1ffff1-7ab4-4e87-89e6-f7afced080c7", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89db75ba-20d9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773625411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773625411, "uuid": "db1f6b79-ca5a-4f8f-a40b-23433515a858", "comment": "Malware payload", "value": "0ecd52016c88d43399d4321fd3af324e", "object_relation": "md5", "Tag": [ { "name": "pw-9937", "colour": "#aaa114", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773625411, "uuid": "925fed14-68d3-475b-82d1-59c43d0fe873", "comment": "Malware payload", "value": "f9b9f59afb276332dfb7092c3e6117374e56af61943d35d25b09f5162aae8be9", "object_relation": "sha256", "Tag": [ { "name": "pw-9937", "colour": "#aaa114", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773625411, "uuid": "594189d4-b0e0-47a9-af75-a8704145dfdc", "value": "T1A7A733E20ED24AA6318B4397A3754DFC6411AF3B134C5AE48E3BE16DAD02F7FD6420", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773625411, "uuid": "70ff053e-f600-49b0-8bb1-265511973a99", "value": "786432:lV69xY1++Su3UrPue2k7+v97Kgl6vlPZ9k2F2UaXXlZOcUP5rqQOSIfbk01auN61:PNV+uI7+lZl491F21rlUxWQOSj0Eu5o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773625411, "uuid": "3098a61e-4e59-4c1a-b0fb-5d4f983a62a1", "value": 46459486, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773625411, "uuid": "d1bc9c9d-9e2e-4680-a461-e843e85ab1d0", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80304f5f-20dd-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773627113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773627113, "uuid": "c02ca662-f185-4130-86bf-d0d976a4942b", "comment": "Malware payload (Mirai)", "value": "f925be442e1f1ab391818e4436b557ee", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773627113, "uuid": "e77c9fb1-2fad-44d8-8e2e-91307a2ff1e6", "comment": "Malware payload (Mirai)", "value": "4e51e9939761fa2348056923c01c52c22f7504db578032cd60ced6fc6fd6ef21", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773627113, "uuid": "c7b0ba5f-f1f6-40f5-b325-0380319931c0", "value": "T1CE735DC5A683D8F4DC12067121B7EB735B76E43A2029EF87D768AD32AD43601E5173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773627113, "uuid": "38515f61-2c1a-4412-94a9-2f2893dd4d55", "value": "1536:MmwRU5gIUOEJQ3SwNVCyc5kyWdvLW2gpARqEWsw6UuQ0Gnm0xgrSc7SJX:MkhUOEJSzfCyc5/WdjW2GARqEWp6UX0o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773627113, "uuid": "b31e22d3-34a1-4a5f-92a2-866740007d95", "value": 78736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773627113, "uuid": "aa23b2cb-0879-4b94-8652-8f53e623edf5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1a43190-20de-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773627706, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773627706, "uuid": "10ce304b-4bdc-41ad-b570-84fcc9e777b5", "comment": "Malware payload", "value": "3c371b6b4f783450f8a16e38b97960d3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773627706, "uuid": "16d5622b-35ca-4a1a-9c61-6b208fee02a1", "comment": "Malware payload", "value": "a339b8ea3160b26728bdf640f1c15852bf6ccd0fa51370fafcd45a8a16a11db5", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773627706, "uuid": "b6d3442b-297e-4eb9-b4bb-17f6fa4a7d71", "value": "T1D1D31A6F93FA317571178359F9E6772492ACC133EA410EE2F8B6865C8FC066201B72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773627706, "uuid": "42c3c081-f950-4da6-840b-c8f49d86c2ac", "value": "3072:X2l4k2w754UsFufxQB/r4KIIinxtPh6I7W4Kxk1w75PFBJFQskutIxYDEePCJl7I:ml4kd54UsFufxQB/r4KIIinxtPh6I7Wh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773627706, "uuid": "bf44e15a-ac03-4517-9788-8fa2c8de540f", "value": 133682, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773627706, "uuid": "ffec576e-0116-4821-88af-b4cd179355ba", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fff7abcb-20de-11f1-ba1a-82aee05be84a", "comment": "Malware payload (DarkTortilla)", "timestamp": 1773627757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773627757, "uuid": "dd2f00bc-e434-41f1-89f9-c9218bc8c095", "comment": "Malware payload (DarkTortilla)", "value": "2ad59001a4f5c6190986d668bd207ad6", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773627757, "uuid": "f3486775-7a60-4745-aded-4c17aa47f7a0", "comment": "Malware payload (DarkTortilla)", "value": "5264bc00d3e45c19812e25046894539af42cf9b38dfc2c3273797ec537dc071b", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773627757, "uuid": "33d745ec-1509-4258-8fdd-cbb3c9cc9298", "value": "T14D45D111AEDB1B28E1BD0B7CD056085C27F5D01BD256EB4B7FF888F0AD92B86C5271", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773627757, "uuid": "36c29484-aa12-4c74-8335-08d55b24aa3f", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773627757, "uuid": "154f0540-7c66-47d7-9cae-b3393327041a", "value": "12288:9qeTbcDMO/Gs6OpBRfN7yHqGrx3SVbupK9AnWPYSiQuq0ISsPNVwhFTEbeRcTy6t:9q2Z0ri3AuSmCsQcAPNKhWSRcfsqtDv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773627757, "uuid": "8ca4eb2c-50ef-411d-b76a-b037b6d69f40", "value": 1214464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773627757, "uuid": "192e3540-40a2-4de6-a488-cd01a890b514", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "655e63ce-20e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773628357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773628357, "uuid": "d1555599-20cd-4a03-a0a2-324ed868a3dd", "comment": "Malware payload", "value": "edd29f59cebe1abdeee68c59822e6182", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773628357, "uuid": "a5d37933-096f-43e4-8269-dedd76227138", "comment": "Malware payload", "value": "7c90beeebf2a9ced44aa674192e4d29dfa3b897ecc1c50b132c43181d08788dc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773628357, "uuid": "178549e8-4807-439c-ba80-e74e155b8c8d", "value": "T18293093174AF052A166F436E80427B1CEBA982DBC600DBE8F4FD51595FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773628357, "uuid": "2ea32a76-3df0-4f8e-935d-601eab856e11", "value": "1536:pmyp1tF/uwMmAIa14oXusIcepeV7tb73WAxCJCStkb5fv2v05x9krfiOEsCZKw6x:pfQI7zEStkbFv2v05x9krvEsCZD6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773628357, "uuid": "7fbe7434-8654-4d32-a885-8e00b6f8857a", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773628357, "uuid": "59d77f22-b5c2-4451-ad8f-e5971357c803", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11b324e0-20e1-11f1-ba1a-82aee05be84a", "comment": "Malware payload (DarkTortilla)", "timestamp": 1773628646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773628646, "uuid": "8e97b9cd-177a-46c6-b72a-9db9ebe79e99", "comment": "Malware payload (DarkTortilla)", "value": "626c4083ae3dfcf9c46c6074139bafba", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773628646, "uuid": "ed5578ad-4493-4b45-b4c2-0b0826f68437", "comment": "Malware payload (DarkTortilla)", "value": "42a6da94c68b200e3b4d7549a95859b66c0ae519215d66041fd65d9c132f5d07", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773628646, "uuid": "066e2179-0736-4bfe-9380-2cbbb770a319", "value": "T16475E0166E8B2B58E5BD0F78C1AA049C3BF4C11B9352E75B7FFC00F59952B82C9234", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773628646, "uuid": "06a7b5ef-8402-440e-9415-9c1fc3e899bc", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773628646, "uuid": "96fba222-ecc7-4322-88c3-3b8fd912d27f", "value": "24576:DtUhmLpi3AuSmCsQcAPNKhDCnRveYepqMKDmfC4KOSSn276zV:DtUULQpSmpQFNK0RveYkqM3fC41p2u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773628646, "uuid": "f16b8ec6-e83b-4ecb-93d3-b689c2a28341", "value": 1663488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773628646, "uuid": "2e4b50a7-2f17-4ad7-899c-1d7a16e867fc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cbc6967-20e1-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773628691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773628691, "uuid": "1529a524-4b9d-4e6f-8b88-032781228aa4", "comment": "Malware payload (Mirai)", "value": "3f9eda708ba742512e57a4665e8cc87f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773628691, "uuid": "e7872a12-e90a-4eae-a059-8e2ac7bbde3b", "comment": "Malware payload (Mirai)", "value": "00cb050a8c83d1250ad1d33c2a07a1c393de621d48c70f6113927a81eea52822", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773628691, "uuid": "24cdaaca-0ec8-44c4-93fc-287026970c46", "value": "T17C834B02771C0A47D2A65EF02D3F17E193EFE9D122F4B6892A0EDB464175E36148AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773628691, "uuid": "615603bf-3bd4-4fde-9807-ff778bde8d6d", "value": "1536:3q402l89RlwRtrhJXnuPzVyMbCaU6muNjNKVFUBAN2T7ypT8N:SwfnkVyMbXgMAVuBsM7yyN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773628691, "uuid": "45593f14-a87e-4cc3-b9d6-0652e5d4621d", "value": 87280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773628691, "uuid": "558586ee-52d5-4319-8eeb-d95235378123", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e203303-20e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (njrat)", "timestamp": 1773629096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773629096, "uuid": "650790a3-600e-47f4-bc61-67c7710beda2", "comment": "Malware payload (njrat)", "value": "ea1b619c805908ba1a5aa54ff33f4398", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773629096, "uuid": "9e84889f-a5d2-4bbc-acc4-c4076fbc3c15", "comment": "Malware payload (njrat)", "value": "5b1fe626ffb6941e940222b6c3bcf5e32b553c00b399c71c53688f2bf7561936", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773629096, "uuid": "d3670ef3-4248-4c6a-b59b-bcd522087bce", "value": "T1A335BE165F4B6F18E1BE0B7C806A244CABF5C4468366EA1FBFFC54F62952F81C9274", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773629096, "uuid": "569b8606-d4e5-478f-b09d-d3ab891d66ea", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773629096, "uuid": "e67836f3-a17e-4630-bacc-d585b36dd565", "value": "24576:KAcD0cJY/iRziTDi3AuSmCsQcAPNKheem+BRU:KAA7JE0ziTepSmpQFNKcemQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773629096, "uuid": "2d2d4fc9-dcd3-4582-9ce6-30a83489ebaa", "value": 1077760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773629096, "uuid": "943df64a-fa04-493d-b69b-516d45106470", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "154956a4-20e3-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773629511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773629511, "uuid": "cce65dc3-e8ad-4ddf-afdb-90f628453131", "comment": "Malware payload (Mirai)", "value": "a9617aaa3b4f5fdedc467390a3cecc67", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773629511, "uuid": "41a74d6b-e6f5-4ade-8b81-87bc49356f40", "comment": "Malware payload (Mirai)", "value": "1467464238cd5701035429e38da6dccd94824ae384a0ea0b479d8106cc63ffe8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773629511, "uuid": "0f45a787-6397-4ad8-8dac-35af23d9685c", "value": "T1534319791985F67CEFE10078F09320E62562471C3B8D95D36193643BFFB5A0873A9E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773629511, "uuid": "4a6c0a4e-93b2-44bc-8e55-bb4633949b3e", "value": "1536:aND9xxEYYxmeT/cuOosbYdRlklvZ6bzuWh:aNPxYmepOosbYdRWlhw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773629511, "uuid": "09334b58-4bbf-42f2-8e86-d907615cdc05", "value": 58804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773629511, "uuid": "7c3d3a35-4509-4841-9b43-a91c18b9084d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab33f71d-20e3-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773629762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773629762, "uuid": "f44cd13c-8c43-4c40-8965-f3a11aaed828", "comment": "Malware payload (Mirai)", "value": "0ad9389db46b6a7ea792bf70ba492d72", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773629762, "uuid": "d2b60066-c544-4faf-9a49-12e2e3aee5d8", "comment": "Malware payload (Mirai)", "value": "f10369703a0a762d12401c40b0c0c0b8b89f4179c1e14714182b4eabaf9253c1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773629762, "uuid": "af3f4334-8dd4-4e0e-ba6e-9186ef1a4208", "value": "T131B3B409BBA55FF7E86FDD370AE9170124CC651A22A83B357934D828F64B64F09E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773629762, "uuid": "c16d8ad8-b559-466d-bcfd-80d4191e663d", "value": "1536:MsUc9u6lTIlVAtTqs2mkwbqLCL315biUfE5uS4yVTLiO5Qr7ypuOq0:ec9u6lTI4tTj2xy/fE5BFS7yL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773629762, "uuid": "13f0f44a-b67c-41c8-bfad-f2ce821b34c0", "value": 117676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773629762, "uuid": "29acc749-98e3-4f42-9d7e-5a94e3d43fce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4ccd33b-20e3-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773629832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773629832, "uuid": "6ae52634-4586-4ba0-865c-ce5086a32e89", "comment": "Malware payload (Mirai)", "value": "8c8c1730b321b7066b623267d6daaa64", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773629832, "uuid": "7c9eeaa1-3abd-4144-9f04-9aaaf469e379", "comment": "Malware payload (Mirai)", "value": "22565595c04aeb2ce3468ce8212164bf7747f693e1ae180c1636adabd50c1381", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773629832, "uuid": "c9922f31-c8f7-4980-a6ee-e1ad748223cd", "value": "T1BE931A5ABC829B11C5C412BAFE2E018E3313177CE3DE72169D14AF2477CA92B0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773629832, "uuid": "5270640b-a266-43f6-a2bf-99acdedf83e9", "value": "1536:1lnEexceaMMfB5NM8s7v73rv8BP3BJ3WJgdwiabrm5H3GdcifxCEi5HYx7ypyZ:1aeaxfFg3KPb32gdwiab5xCEi5M7yI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773629832, "uuid": "caec81a8-596f-4afa-8dc1-b466ac495b7f", "value": 96320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773629832, "uuid": "82a0f65c-8935-463b-8749-fe422756fd69", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93d467db-20e4-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773630152, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773630152, "uuid": "7918e4c3-289a-46f5-8349-f4c790f4f423", "comment": "Malware payload (Mirai)", "value": "a78df4a4e52e25cff44712ee65503dce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773630152, "uuid": "509e485c-890e-4eaf-a90c-4f78a6c34c9a", "comment": "Malware payload (Mirai)", "value": "72eff03b8573329818b38185074aa763e99d15f5709fecc44f9afece21dc06d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773630152, "uuid": "f427987c-e5f5-44e6-ab21-286fd8a2dded", "value": "T1E06154D4C83094378C868A0BF561E29A5DDC93E599E0C12C57A8DE3711E2F3E7C9FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773630152, "uuid": "83b95099-2924-45e8-9d36-bfcd323c7cf2", "value": "48:ZFazPMBcGeLzXb17xnPI+75sYFs4az/hxxFRQn0YKQDO+l:ZFazPMBxWzpe1JNzFTAOO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773630152, "uuid": "70921738-cbd8-4081-9bdb-ad1d37e59642", "value": 3460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773630152, "uuid": "30e7392a-0995-4f39-9192-6449fa647673", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f7f1b6b-20e5-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773630441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773630441, "uuid": "edf3d4b0-1592-44aa-bf44-229dd19444b8", "comment": "Malware payload (Mirai)", "value": "9544a9162d944ab65ed04dd5f89be235", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773630441, "uuid": "91c4cbfe-8212-42c1-ab3a-5f3a4be3d8e1", "comment": "Malware payload (Mirai)", "value": "0a92d0246341763621a5b0808df4fabd035c323e50354c6d6a2fc457b5ec61fb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773630441, "uuid": "105bb8e2-5fdb-47b9-8c4b-c02dc59f830c", "value": "T1E2936CDAF400ED7CF84EDA774463090AB531A3514B930F3A6367BD97AC721A85827F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773630441, "uuid": "d78db224-194f-4174-81e0-2dc64e16b4cf", "value": "1536:aUfaz7nDx5Up9urXZgK86gNl2Q72khD9T2qbZ87sYyY3eMqH8IqyVwDDLDpQH+7C:hak9urX2KbgNl2Q7XhZT2qbyyY3eeI37", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773630441, "uuid": "ae1bbeb7-c0c9-4dad-9e8e-c99e29e2ef6b", "value": 92808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773630441, "uuid": "b2e26fd8-eb82-4f16-a29c-af1294e0002c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab122a1f-20e6-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773631050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773631050, "uuid": "9f1f013e-1a54-4eac-ac79-c5407dbacbed", "comment": "Malware payload (Mirai)", "value": "d372cfe6854782eb1f3b2cc341187c88", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773631050, "uuid": "a2deeff3-5b1d-4335-94ed-d7d573356f4d", "comment": "Malware payload (Mirai)", "value": "a9c17380091a7393278d5a6e712e10eb5895894bcc581a6fe0572a4fd63e7f15", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631050, "uuid": "eb3e23f7-37db-43c8-8a6f-631640efe2d3", "value": "T14DB3950E3E218F6DFBA982344BF78B21969833D626E1D544D19CE6021E7034E745FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631050, "uuid": "b45228ae-22a0-471f-91df-ea800ada6785", "value": "3072:Tiax+L4Zy4J0h3N0Kasx/7dI9MILBn7y+D:Dx+L4ZyB3N0KasxTAZL57y+D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773631050, "uuid": "c808f35b-e17f-4c37-84c5-d29b6e6f73f3", "value": 113692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631050, "uuid": "3432d590-4979-461a-9fca-0a098d78264a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01c95458-20e7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773631196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773631196, "uuid": "1f05539f-08ee-4d14-b87f-f71b21f4548e", "comment": "Malware payload (Mirai)", "value": "01f4cbfcce1586d4201457cd6af87ba6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773631196, "uuid": "550f34e3-c781-487b-a0ff-63863a26d3b8", "comment": "Malware payload (Mirai)", "value": "a8c55e579790c6ffe5239b837488f71456bde46f3b89a3ec31bf37aa9ebd2686", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631196, "uuid": "b676ce7f-648a-4005-89c5-f7441557ed23", "value": "T128739E73D8295D94C1800AB5B4E49FB64B63B804928B2FF659A6C2B9D447FDCF6083", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631196, "uuid": "e5b80246-131b-4e46-b6b9-a39fe7d5961b", "value": "1536:fAwGMCk+vLLezabjykmk9KKDOVD7qV/OCch5yjH7yGw:fsj3j9NDgG/OF077yH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773631196, "uuid": "7253dc0c-f87e-43b9-a65a-817d0fbf29e4", "value": 79380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631196, "uuid": "a9f3bd69-3b98-4314-a861-01ad0088a889", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa646f06-20e7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773631613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773631613, "uuid": "bb250643-44d6-45f1-bbfa-721b9ff04fde", "comment": "Malware payload (Mirai)", "value": "7739882688c07dafa3c445a6f3531b7a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773631613, "uuid": "7f2b2720-58c2-449e-8510-c913b98108b0", "comment": "Malware payload (Mirai)", "value": "e2334ec8f063439a2d3287a8f4570f1a939dd30c93ca75b15574a4fa4a2803b5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631613, "uuid": "a52c5c0e-e2b3-4d06-a861-0de92cc59e5e", "value": "T1D7833C52BC819A12C6C522BBFB6E428D371613A8D2EF3217DD156F2437CA92F0E776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631613, "uuid": "55b338da-759c-410a-8618-f8baac0be529", "value": "1536:gQFhCTfSTa0SXqJJh/hplXhxGBnI/GR3gJT9ZAyEoccBqfCsoPO/TtYuSBpx7ypz:gQFh6ffILh3buOJhZAybcIqfhVSB7yB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773631613, "uuid": "a240442a-01a3-4e36-995c-c8f8664be07c", "value": 88760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631613, "uuid": "1ac8b37a-b62c-4133-b40c-f587d792069f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "538faaaa-20e8-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773631763, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773631763, "uuid": "b8bee28e-7ed1-46fe-9811-8b33436e6f78", "comment": "Malware payload", "value": "92d592f7e4a17b313a5728c32f3efaa2", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773631763, "uuid": "18d4520e-13cf-4daa-883b-fa2bcb03e53b", "comment": "Malware payload", "value": "f11dbcf89e780c9f96843fe5310d2996ee167125cc6153fad37a9b4cc12cbfec", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631763, "uuid": "1a97eada-f49e-44ec-87ac-c25b0a696af6", "value": "T15CB6330BA5D6C17CC9A339F30BF0CBF91BB570E44B09E872D9206ADE9577441A7306", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631763, "uuid": "884aa2bd-0c23-4024-8f7c-a9dd2f5a4c56", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631763, "uuid": "b792e26b-0c4c-4446-a2cf-10c97e68ac78", "value": "196608:2OOpiV6gqXmC1w9uo7NNc22GJ70kAqiNuMZ3eje6paLrV+uTcO/SgFF8rnjrQnGr:3OpixqWmwwX2VJwqKVejeuaLc/8SgFFO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773631763, "uuid": "4d1ee7fb-1502-40ba-ac86-ad2dc617c7d7", "value": 11394560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631763, "uuid": "1c64cca4-56a2-4007-8e75-c262fe07228b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "168b15e8-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773632088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773632088, "uuid": "93cd54ba-0b59-4eff-a71f-5fbfffad4733", "comment": "Malware payload", "value": "c73634570e4a70d7040fabcad0ea2773", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773632088, "uuid": "b56f5f03-aec2-4a62-8042-520cd0dd50d2", "comment": "Malware payload", "value": "a7576c44f6f25dc87fcc803b0e463e385c13a048169536a7c7a5de804b0891ef", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773632088, "uuid": "bfcbb37f-c5a3-48a9-b794-e83c1b785583", "value": "FA43124623662AB6857149F0A3FCFF8EE24A3E58CFF55C197C107A28A93136D2CC481C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773632088, "uuid": "4c93690d-58a6-4506-ad4c-2310dc9088ce", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyqe:yYI0ARqw1qAEv7UIFM8oJorFquyje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773632088, "uuid": "4a198682-2415-46e0-8474-11b802b74ee8", "value": 57920, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "137da6c1-20ea-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773632514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773632514, "uuid": "98dca449-3465-4525-9d6a-b3219f8a7866", "comment": "Malware payload (Mirai)", "value": "a77890954f2923a2a8ba9a0537f53b6c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773632514, "uuid": "748abe65-ca98-495a-92cd-2ad0f9443c37", "comment": "Malware payload (Mirai)", "value": "01cbaaa24b9edf6b9c5a5b1410f9d5744303c27e3bd8403677c2fd6708ae5e4e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773632514, "uuid": "2aeeed8a-47ff-471c-9e9d-83c5c0591c39", "value": "T119F33B46EA818A13C0D61776FAAF42893333A764D3DB73068D18AFB43F8675E0E675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773632514, "uuid": "974f3fc3-9f5d-4ef4-b73e-270e1c9afca1", "value": "3072:KIdsixwhLePFGfaupp+mojb0RwWfkPOy7yZEcCcQ6M/97YRnvS:BdMLBfauv+mojb8wTx7yZXCcJM/9MRnq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773632514, "uuid": "08972ad4-a748-49dd-bfc0-d09a25281c5f", "value": 170612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773632514, "uuid": "54c47fe5-21c0-4e9b-88ed-44982f596a17", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8c16b35-20ea-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773632791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773632791, "uuid": "f5ccb89f-63a6-4e05-8d66-79246f6663b3", "comment": "Malware payload (Mirai)", "value": "a26b7466835d8eb91c43696c81bec7d8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773632791, "uuid": "c46f04ad-3a74-48d3-8f18-89c65ecf65a4", "comment": "Malware payload (Mirai)", "value": "824264de5a67cd58bd91d70f82bbe817d727ff641135dc9e0b199a7f8633224e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773632791, "uuid": "b6f5a768-8f85-457b-b70f-70b2557865d2", "value": "T1AA934A52BC819A12C6C41277FA5E428D3B1713E8D2EB3217CD196F2437CA96F0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773632791, "uuid": "73e76ddb-d1b5-43d2-aaa0-983435b13c17", "value": "1536:rMUllHfQC9YS6tApbdYxnwxs+ancMMfgus1c7RZSM3EzcwRm3sVoPOILtkVhIivi:rMAZfQKoodA6bKyIusYRZT4cEm3+Bh/a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773632791, "uuid": "dbdbc94a-fab7-45a9-a674-c4ccd9a4dce6", "value": 91872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773632791, "uuid": "1a89f488-7e73-4642-8c5c-ee070f7366ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e31aec5-20ec-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773633445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773633445, "uuid": "8623f85e-330f-4ca9-8ae1-c02c98c0aa3d", "comment": "Malware payload (Mirai)", "value": "da9c44a820d593630b9d5e31f66fcaa9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773633445, "uuid": "47780e1d-4776-4fe1-a32e-33b3bee6d1e0", "comment": "Malware payload (Mirai)", "value": "1993ca03661ceda004963be1cbd133863062542636645bee674b32df2e03502f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773633445, "uuid": "72b3a50d-5d6f-4b92-8d6b-dc3d827b80fd", "value": "T12E93E716BB910EFBD86BCD3706B9070134CC951B22E93B3A7934D928F54B64B5AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773633445, "uuid": "683afc30-c830-40bc-8580-c9e27bb6f4c4", "value": "1536:ZFnHtvPNa6ZXfpq/yibjC8GtTUV3CQ7/uZzVmlZtZ:Z5tvPRNQ/yNUV3COu07", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773633445, "uuid": "1fde9357-0b64-4d7e-aaaf-8f90ad68a768", "value": 89480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773633445, "uuid": "d91df757-79c4-46e4-8170-7de178565917", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773633790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773633790, "uuid": "e47d8fca-9a31-4dcb-bbe7-eb7aeb5af163", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773633790, "uuid": "083a1fa6-81c5-499a-b12b-32860c408d99", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773633790, "uuid": "b88fcab5-911c-4823-af02-f048c88d10b1", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773633790, "uuid": "6971a96c-c3b6-4ef3-8b66-0954572c9450", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773633790, "uuid": "102ff479-2ffb-4a54-b6d2-c153def0f754", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47a3c6b4-20f0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773635179, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773635179, "uuid": "284842c8-efaa-4037-bb74-53affd1f535c", "comment": "Malware payload", "value": "156905bdf614d7b221567127aba59ad9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773635179, "uuid": "0df9f0a4-6f4f-4398-883f-3f2feef9b8d9", "comment": "Malware payload", "value": "dcc98af70019dbebcbc95378af11e2042152109a557be6a2f7268bed86962557", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773635179, "uuid": "0ec4e31d-6a1f-4b72-8364-985eaae7e3c3", "value": "T178639509EF654EF7EC6FCD3745B90B0135CC651A12A83B3A3574D828B65B50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773635179, "uuid": "fcf7536a-1348-48f5-83ed-0be828404f4a", "value": "1536:Ks5yig4kp3zWRp4NV20gZqdusqFLQQTBY:Ks5yS037vgNFTBY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773635179, "uuid": "1179d191-9e36-45ce-85a6-bbf84fb5129c", "value": 68956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773635179, "uuid": "390fed74-eb84-498a-99b5-125af06dff7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7db9cbac-20fd-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773640853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773640853, "uuid": "8a4e3ae9-215d-4f27-b0d5-76d3a260c8b5", "comment": "Malware payload (Mirai)", "value": "ac4837c2ed3b6ec0c08572b35af0d0b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773640853, "uuid": "d7a3a48c-8851-439b-811d-d5153085f7d3", "comment": "Malware payload (Mirai)", "value": "3788358a206d7dfe9aef794f210c2b249cb7ac1ed58301e0e1022799faf7fa91", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773640853, "uuid": "3bd8f106-4219-46fc-9513-7789dc0c444b", "value": "T129634A81BC819A13C6D112BBFB5E428C372663A8E3DA3213CD255F1177C696F0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773640853, "uuid": "4ee3e005-488e-413c-b7c3-164275c6386b", "value": "1536:Rk5GMYYv3Du92zhpYaN/f+vKt8WGN5ZEO0lSHkPvl:Rk5GnYC9YhTh+vy8WGXBIl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773640853, "uuid": "e4e761cf-babd-46ad-a356-4877c4271f35", "value": 69080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773640853, "uuid": "c9db734e-0e6e-4536-870c-5c87ada65a68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "819518ec-20fd-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773640859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773640859, "uuid": "dae23a4c-5af6-4b5a-8f72-dd5601121be7", "comment": "Malware payload (Mirai)", "value": "d863ca3707f3e2c3fa7e2a3a029fa651", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773640859, "uuid": "dd998189-d4b1-4c58-9338-bdfce39e1b34", "comment": "Malware payload (Mirai)", "value": "1f85624921573b384746ff64943ebe552f513236066c3c1b85fba81321e9e243", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773640859, "uuid": "bb193a2c-0fde-4aef-a097-663a68c0cd6a", "value": "T167634A81B9819A13C6D012BBFF1E42CD372663ACE2DA3213DD255F1177CA86B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773640859, "uuid": "c295e351-eab5-4688-95ea-effa22ffb713", "value": "1536:37n6y61y/ke7y7+/qmXIwBlp4GZFOLCLidTrs:37nvX57sa3XdBlp52dU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773640859, "uuid": "a135cf1f-3e3a-46c7-819e-9ae5ee0d1512", "value": 66880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773640859, "uuid": "1458375c-a081-4a44-9234-878a55eed3c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "629932c1-20fe-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773641237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773641237, "uuid": "b4f9138a-f666-44e2-ab39-b9e230b66cae", "comment": "Malware payload", "value": "64dd199d7918208423c32c5d310cd2e8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773641237, "uuid": "90f0a28e-8ec2-4167-8025-5884bd6c571c", "comment": "Malware payload", "value": "3e59e0d8a693d8c7bedb077338690b9f2887a717fb89a5a02271081a23b92c8d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773641237, "uuid": "9a342fc2-6bf7-40db-889d-b5b1afd753de", "value": "T1B28309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773641237, "uuid": "ec9905f2-efcf-48db-81f3-ab42f89ff94d", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnqWa8VN/:XEKltp9txAX/yr2pbqWxVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773641237, "uuid": "832626de-c118-4195-b830-5e309b01a591", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773641237, "uuid": "9a08f0f2-5383-4478-b944-0bba21499d8a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28ecf71d-2100-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773641999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773641999, "uuid": "7e73d1b4-5a46-429c-9636-c8126196e3ae", "comment": "Malware payload (Mirai)", "value": "c9edf21e42a27eb4fc4960761485f7a3", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773641999, "uuid": "3f98a42a-2874-431c-88c1-ec310d9380a4", "comment": "Malware payload (Mirai)", "value": "b2e47f06e9d10d61e0c22fa4f8b9a33a35d315f08209484dcd482e934367408d", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773641999, "uuid": "a3fb3fe7-b100-48ad-8aa2-376ed0c68c18", "value": "T12483D71E6E219FEDF759C73547B74E21A39833C626E1D681E26CD2001E6024F646FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773641999, "uuid": "229091f3-8f41-41bf-a0ab-3b87633f0527", "value": "1536:4hldEEVkR+3lBA7wdODnqhbahbujbNU3qgkWbrCRewBPo:43dxVkRa/A7VTqgkWbrCTPo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773641999, "uuid": "429deac7-a03c-4f9f-b989-918fe7e99bb7", "value": 85384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773641999, "uuid": "5d2e2c90-77bf-4a0f-8427-8db20aa17fe1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9c5930d-2100-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773642349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642349, "uuid": "2a55cea8-7d1d-4488-ab85-25b0afca13ea", "comment": "Malware payload (Mirai)", "value": "52c9f6ce6d90850d74f66b20fe1fc27e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642349, "uuid": "9de7d1c4-5311-4a62-916e-534d7690005a", "comment": "Malware payload (Mirai)", "value": "b7cb6aae28866ba85bdb85f4d89b2ed624726fe001fb538b60b14947d893f137", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642349, "uuid": "b42dc3e4-1141-46e4-b675-8d640f2006a2", "value": "T17F930946B9419F12C4D621BAFBAF414933537FBCE3EA7101D920AF5027C69DB0EB66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642349, "uuid": "d2e419a0-51e2-449e-910c-77833a747e11", "value": "1536:9JnyzTGR1Q58tk8BgYzaFMHGXeaE/5jIGLtYNcTANlq5i3ZZ14KvUY7+H/i:oTU18FYzayHGXeaE/58GLtY4nsZZuKvX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773642349, "uuid": "9ff0e01b-c76d-43a3-ac6a-d4129a2c6a7b", "value": 95076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642349, "uuid": "61ccdb0d-5f45-42c6-961b-15205e02f0de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dae7300a-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773642727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642727, "uuid": "a58ac393-d6a0-4c94-a203-8f3f03300a43", "comment": "Malware payload", "value": "9c40dd38cebf6f245c16036de6ca9d24", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642727, "uuid": "08914d25-7a25-4a09-b18e-2ebc889eda58", "comment": "Malware payload", "value": "bcc853cf6c7f81976978a5d6072b244206e933fcd81c67f3d4f763f299117898", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642727, "uuid": "a1e23630-0a59-4f6a-b787-f1e431cd7740", "value": "T10EE0E57B9622EF218F868C37A313464828DF9082A5D14E78308F54A3C6EDF51A251A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642727, "uuid": "656a0600-31b9-44fe-b7b7-5b209cc39e3e", "value": "12:ZCkslubiDlQFQJyMOqtCmKGFHRCmKhapYg:ZCksAiK6UNJG1kJsWg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773642727, "uuid": "296c8321-7f14-4a35-a633-985e10efd222", "value": 426, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642727, "uuid": "bbcc6627-6616-4f27-bce6-a6e78982e11e", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20e07ae5-2106-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1773644563, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773644563, "uuid": "20209437-4c12-4600-9030-5a183c27445d", "comment": "Malware payload (Vidar)", "value": "1eee6374fb8a779f64c91c881223df00", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773644563, "uuid": "28a02ce6-66ef-456c-9c80-b38c3f62b3d2", "comment": "Malware payload (Vidar)", "value": "bf0940e105f105a2f6e4e75c6ea56ded68702fe6ada477a1ae6db20f7c101da5", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773644563, "uuid": "2ac8c818-a104-4dc7-b2da-fefd510c6939", "value": "T195856A0BBCD104BAD06A933A89B252A27B75F8190B3233D72F90A7783F767D05A757", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773644563, "uuid": "a1a66181-0ae6-4842-a671-43fa146012ba", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773644563, "uuid": "62f9fc86-93fb-4477-94c3-ea7b26eea928", "value": "24576:yU7nVzVm9T6dXEid1K2WnqYJaiuGiWPKjYyJHuH:yUTVzVpNSnqpiJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773644563, "uuid": "8178c266-46df-4413-a9ba-a9e50a6e671f", "value": 1776128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773644563, "uuid": "dc4d6768-4c32-4d42-9d1f-8ef8f380a4cf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92a5cf85-2106-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773644753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773644753, "uuid": "649a8866-7083-41c2-af11-ea0575620c24", "comment": "Malware payload", "value": "537307d238b145441d7b730c6534d229", "object_relation": "md5", "Tag": [ { "name": "pw-7701", "colour": "#0ed735", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773644753, "uuid": "f8b86bb8-5b97-4508-b81b-a423f27980a1", "comment": "Malware payload", "value": "de670406bebc9a42d8e7c1d36341cc4b1355f87769de4c08504c75d929771120", "object_relation": "sha256", "Tag": [ { "name": "pw-7701", "colour": "#0ed735", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773644753, "uuid": "8457fd6f-2d74-4bf6-94d2-821c586ad15e", "value": "T1FEA7333C952580D3052F6376A1D96861806739E8F73CC8AD30A11F2BDD18D96B36AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773644753, "uuid": "e908bd5a-25a4-47f0-99c9-a4fcd118e2b1", "value": "786432:jYw+Swgyyk8wL+jkOBCyltkrlbeqZQqE+Wvt6WQN9Q6/Pzua4TFUobqxgCpZH:EHykSksCylWod+MQD97L4T1qLpl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773644753, "uuid": "bc851538-35e9-4aba-a50a-a449fc2d3478", "value": 46230526, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773644753, "uuid": "86bd550b-cf02-443d-b3b6-617cbd479fa2", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fdbde7c-2107-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773644990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773644990, "uuid": "39ea1631-b353-4b6f-a227-a9fa15018f57", "comment": "Malware payload", "value": "2af8ad59e77217d9ead7b091d51783ad", "object_relation": "md5", "Tag": [ { "name": "pw-photoshop2026", "colour": "#1dd898", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773644990, "uuid": "0dabff32-21da-4c49-9e6d-f11d50f1779f", "comment": "Malware payload", "value": "9646a08813662fa04300ffeaf963a2e45022422239320fec1614b2e2690e2fb1", "object_relation": "sha256", "Tag": [ { "name": "pw-photoshop2026", "colour": "#1dd898", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773644990, "uuid": "69af47d4-9250-456f-a7ef-afdbdf27b199", "value": "T112A7333331D2892CB828969315063CA4E3D955E77F03F5EA96498443BEAFA3D73E42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773644990, "uuid": "cdab6df8-d759-43b3-965f-667feda075e4", "value": "786432:5XbQ0m/h6wBacfAObCrJmIqXY741FiOEd+VEbrASh2E+grDYaB7i/MgGxnrTQcar:5rQ0mZnMwAO2rJmKk1FO+J/HgQaB7+c8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773644990, "uuid": "4dc10b5c-161a-4920-8af3-55545f3a496c", "value": 46468750, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773644990, "uuid": "75b2cd77-66a4-4afd-bd6c-7e198c74fc24", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39c1c557-2108-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773645463, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773645463, "uuid": "e7287fab-075b-4ffb-bbcf-3859ab296d66", "comment": "Malware payload", "value": "f39bf431478bfe4908be7dfa885cd271", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773645463, "uuid": "c0d818ed-f076-4bf9-8d8c-26d15a0f8fdd", "comment": "Malware payload", "value": "3fa17a94f133fa771768c7dbe0ac6afe9fecba86e220c153133e70019a63c8ce", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773645463, "uuid": "9f5e140c-3f90-494b-a997-7ea995d3d4b4", "value": "T1A024E0AA023F2575DD6FE7C468CA2674B80F22EB83FBE804C9985DE4D075A0D52553", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773645463, "uuid": "855e421e-1c08-478b-a9aa-040246fd1115", "value": "6144:rqawaLqn/c4ss1I4At98lCZEMbsl/H1uA9VOJYQEh8Id:rqaTwjzIviCZEpuA+vY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773645463, "uuid": "6bccd060-3a06-4d4d-af67-677efee2c9f1", "value": 213070, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773645463, "uuid": "bc787f58-015e-4624-bb87-ef828319e3ad", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "581dd94d-210a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773646373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773646373, "uuid": "1a291705-0eb2-4f6a-ae42-c52fab1886e5", "comment": "Malware payload", "value": "ccc8e8bb8056c0b5a66092e6a604f725", "object_relation": "md5", "Tag": [ { "name": "pw-6601", "colour": "#2ba93f", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773646373, "uuid": "1f774863-03d3-47bc-b9a9-af14228a3d09", "comment": "Malware payload", "value": "d50f0618c95badca62b63ee067aa066ce33758945eca6d91bde06572bc13d13d", "object_relation": "sha256", "Tag": [ { "name": "pw-6601", "colour": "#2ba93f", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773646373, "uuid": "ee873ba6-b233-4517-8f0a-182618995493", "value": "T1DBA733586B84396C76AC225BE58C6EC8F3664236E686C0FF7550BCCADF1E9B5034C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773646373, "uuid": "eda830c1-87fc-4bb9-b9cc-4c5ea5ac9855", "value": "786432:rz69XdcQgKLxLQkpnYGk2o2Jcq4JzYzuy5zItXgp/xM0hsTkPhp+9Y9Wg3JzYXCi:reZqQg2nYWJVQzYKqzogp/mlMMY9Wg30", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773646373, "uuid": "8bc1d7d3-68ea-4094-8938-dd00bf422fd0", "value": 46391438, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773646373, "uuid": "cbf6a90d-e2d6-40e9-837b-d752edf23ac1", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5852da1-210c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773647443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773647443, "uuid": "fcc116bf-12b0-4c4f-99b9-90881118f3ef", "comment": "Malware payload", "value": "65524a5bd57536f95ad3f16a276a3c1c", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773647443, "uuid": "25e05f50-ead5-4a20-89c6-df9affd62906", "comment": "Malware payload", "value": "46775a57f745d026e485d40b477c52284f92978bd729d77c22cbd8ec3bfd8d76", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773647443, "uuid": "5077dcf5-a8e7-4e3e-9f8f-b044bdf2fd3d", "value": "T1E4083329C08092AFE3F1BE3598C9F9F149092B2C7AB9065EDD5A207DF390D45DF0CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773647443, "uuid": "e4d1a116-4055-411e-a9e3-b513e0db9dd1", "value": "1572864:KXY0/4G2OoiwKTE/QtqbPd6RgzzAZzkBMwpbMTWDAYo93p:0Y+d/c4tqUCzzANGMgqZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773647443, "uuid": "50dd5a88-2163-48c1-a8a5-b192cb7966b3", "value": 78181329, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773647443, "uuid": "0b2f3fb6-c6ab-4560-949a-9ea9efef84d9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cca979b1-210e-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773648287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648287, "uuid": "082b8032-40ef-4667-9db8-ad92f290180a", "comment": "Malware payload", "value": "3935ad5ca99a9285a00f1f504dcc3fce", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648287, "uuid": "05fcb3e9-4b60-4dd7-9415-6dfb244e598b", "comment": "Malware payload", "value": "755ec4b12718ba0e4e6769e19969d47df4e099884c142e5ea0c702aec97a64ae", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648287, "uuid": "72a83a60-2864-4786-92db-0d419adf7301", "value": "T1BCC833F35E43BB5B96A18C3E61884A2D2C9E3187D66B32FD3C34DF25BD5859848F02", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648287, "uuid": "97575e34-06aa-4a67-bc62-401fe97140c3", "value": "6291456:5qrF8Vs60xDNtYXPKHWhE/kZSgECoGxsZgzMcCt:AfbNtCPKHPYSgErOJCt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773648287, "uuid": "b3108c0c-7013-4daf-b4b7-a205f37a54f3", "value": 248239502, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648287, "uuid": "c86b4832-7719-4ae0-8353-097a460b3bcf", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbdf9c58-210e-11f1-ba1a-82aee05be84a", "comment": "Malware payload (WallStealer)", "timestamp": 1773648366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648366, "uuid": "f3f17f3f-7f90-4234-943b-b7bba47f3b23", "comment": "Malware payload (WallStealer)", "value": "3cf11d58a6788eb72d8ffd3f7187cf77", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648366, "uuid": "c28be6e5-7662-4bbf-bd62-e07550eae49c", "comment": "Malware payload (WallStealer)", "value": "ec753927343b794fa469c748af062ebf8cbe7418a8a734990a4e2d378416fcd7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648366, "uuid": "19d4fa8a-e99f-4b9a-88c1-b7d1574836de", "value": "T17CD47B0DA7A581F9D1B7D0B4CD038517EB72FC564732669B43E04A862F2BAA49F3DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648366, "uuid": "078a6100-4988-4eef-9d3d-31e49552105d", "value": "a330d858063c312aaac6d9eaeb29a36b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648366, "uuid": "38932149-0c92-4b35-a0b3-6d483e97885a", "value": "6144:6/FAnFeGb74gQ/Dmeqxt8UDRiiVxdB8+CbTrK9ZgnRs1VzYXWjPCAWzfO6rn:WA0sJQ/Zqb8RaxXaYQRkVk3THrn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773648366, "uuid": "9a5b4c9f-0906-4885-9b67-b2f1e3732df6", "value": 649216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648366, "uuid": "ee9524c3-34b9-4fc9-84a9-615512e39f19", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "681b9337-210f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (chr)", "timestamp": 1773648548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648548, "uuid": "7a7c8dd6-c70d-4035-a9c3-0b8584907629", "comment": "Malware payload (chr)", "value": "b06d01a8e1e7de9b0463faed715bdacd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648548, "uuid": "51e779ce-418a-4709-af92-528d2276c04c", "comment": "Malware payload (chr)", "value": "10d5631af53770428ddc903808406d8da87c185f3c2a6a8a082064a9ca9aba7e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648548, "uuid": "c933178f-4d1a-4166-8302-d9ecd5ed5004", "value": "T1E4F52345AB651CF6EAE38675C512020ADEB17C820BA5D69F03B40DD7AF177E29E3C3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648548, "uuid": "865bb7e1-ec35-43b2-9150-91629b474d79", "value": "54900ccfb545b5ae7e626203f26ff348", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648548, "uuid": "51bb2717-c5ef-4b64-9d7a-f7a47c25893e", "value": "49152:L0XTgzSMs60kFb565LDs5ru26Mmj2qPvkrsjRZeu/Ks/Z4gIfEK7wnBKBw3/F2JD:Mc2Mn/F16+u261FRx0gIfEfKu8OC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773648548, "uuid": "286d5221-2f25-4c8d-bbb6-fbe137c1a3c6", "value": 3435033, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648548, "uuid": "d5182204-e854-401a-b8e0-beb6bbc0d0cf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b30c503-2115-11f1-ba1a-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1773651076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773651076, "uuid": "dd8fb880-77e5-47c4-9add-66b8f552ac1f", "comment": "Malware payload (GCleaner)", "value": "ff8bd67c68e9c2aedc90bde2e82d4427", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773651076, "uuid": "81384d9e-08c8-43b2-b82f-6db14479ded6", "comment": "Malware payload (GCleaner)", "value": "5a1974ea6d3977614d0b0652598e19e3217e680ab4ebb0baffe4882913de48b0", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773651076, "uuid": "43dadd39-506c-417b-9b4e-16e4d62efef3", "value": "T173F49FF5F6A08732F1226A38DE5B51AD5435FD80292868C63FE8DDCC9F2838D75252", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773651076, "uuid": "8ac5ff91-2475-4c94-9aa8-32b305c72d71", "value": "6b083fb37a76caa764f52ee33010da12", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773651076, "uuid": "c4ba9b6e-6b4e-4feb-8562-d67b2c3a6092", "value": "12288:CoobuFoGPs9dI/GMOFUV67ABUymhyQupVRNLiCwKMNCm:rsRGPsftMtVzsIpKK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773651076, "uuid": "1d4c53e9-6164-4945-8ba7-e56b8d745152", "value": 777216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773651076, "uuid": "e4cd34c3-0dc2-47d5-bd4f-549298dae90c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26bd198b-211a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773653162, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773653162, "uuid": "8472d7b5-25e9-4e1a-af57-e2d50eb4da25", "comment": "Malware payload", "value": "ab346b50ea17790be5ece4c4fcd53b9f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773653162, "uuid": "98bcc619-9c0f-4fc3-a057-4c556f211921", "comment": "Malware payload", "value": "06d1622a838fd66b8899082d27fbb9a3229a7b1a85e40158f4d1b605d6e5766b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773653162, "uuid": "6af5f0e4-2a3e-47fb-b54c-9fb4ed211fdc", "value": "T10234026F33F98AD7B353041ACB97C62D251918BFF822B6CB0AAA4448D58D530385F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773653162, "uuid": "f5f5c0f7-5aa9-436c-86d5-04e5302cd2a1", "value": "6144:Itbssd6LSxY1Ylx76hlUQnNe9Kix4nBsfffLsoHZdgYh:QbsTLSxY1TRnNeojnBsfffIo5GYh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773653162, "uuid": "5a95cdbe-24c5-48f6-a3e4-4bd902ba3c93", "value": 247880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773653162, "uuid": "cc43416e-2d15-4985-be96-78a817bb9ea4", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24ac0e22-211b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773653588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773653588, "uuid": "62d348fe-3581-44bd-a2b3-64618db0dba4", "comment": "Malware payload", "value": "a1975f01c8650e2f38863286119cf64d", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773653588, "uuid": "b0903758-5699-42d7-a267-f9ff636d89e4", "comment": "Malware payload", "value": "ccc8e42db74dbd0dfb0d8a115f5f3a131523adab8c76fbebeef393e63d6746c1", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "RedNet", "colour": "#c2b512", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773653588, "uuid": "611eb0d2-fba3-4b86-a7b7-1cc9d466ae09", "value": "T199863360AA828173CC3129B10ED7EB254FDF04278736E6635DD92EB26A756F5E3311", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773653588, "uuid": "68a85b24-6094-43c5-8c7b-e14d7de354ee", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773653588, "uuid": "02295ebd-1f45-4e53-86c3-f38a297c83ac", "value": "196608:IBzfO1kuMHPgd7WShYWuOFMUSPgN+Vp1ZXl7542fN9+9u8:Wuai7dvdcC+t5BfL+9u8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773653588, "uuid": "2181fd52-bcf4-4b3a-ae48-d9620c3edf23", "value": 8586240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773653588, "uuid": "ccb3aa75-aed9-43b5-aa14-4f40ca1c5b1d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1773654677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773654677, "uuid": "16287ad5-8645-4f60-ba1f-e9c1c4aae728", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773654677, "uuid": "b4eaa1df-1d5a-41d7-8aa0-fa49a37cdd0a", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773654677, "uuid": "b0b62321-cb44-4998-8899-425ab537f277", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773654677, "uuid": "6b28b52c-e95a-4225-b7c2-ca078f45b3b1", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773654677, "uuid": "3f08278c-71ca-424b-854e-a88dbe701473", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a87775c0-211e-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1773655098, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773655098, "uuid": "713f7dcd-2800-4b6b-80f0-d7ffdb05bccb", "comment": "Malware payload (Vidar)", "value": "2ec717284be82d7c8af11067529f83d8", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773655098, "uuid": "3901716e-f0e3-4f56-b4bc-744fc9724812", "comment": "Malware payload (Vidar)", "value": "1d1b9aad90fdb8eac8bcfeb7c34127bcd9f813242b9f72ffa91c5b00dd570fcf", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773655098, "uuid": "74e55d8d-a05e-4ce3-b746-0ea28066645e", "value": "T175A617AB32E48968C15D8D3AC0B78B018CF7B175077FE1EB5D9407B8DA229C15E7E9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773655098, "uuid": "b1a29d0a-4294-4d43-a233-6bbb643d3f0f", "value": "b8399aa8e7b34c992334ad63f681f404", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773655098, "uuid": "a84913e3-9810-4ce9-ad81-8ddf3c30532d", "value": "49152:63BDMNyKXcTCa1C7hoaeKEvj995SA50moXGQRdReVTVXzXtdF6UYiOl:lZ9eDRSAOl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773655098, "uuid": "4d6dd77a-8687-4ac7-91c3-3c8526e3e6eb", "value": 10289664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773655098, "uuid": "01858f6f-cc86-4ecd-b67f-26907527263e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f43bb6c-1fc2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1773657970, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657970, "uuid": "cc7653f8-f248-461f-a1b4-0abbff4b3ada", "comment": "Malware payload (NetSupport)", "value": "7fe56ee0ab1be48dd475e34ea992bb37", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657970, "uuid": "6ca97d8a-6fe1-4fe9-b4d1-a2762207f51c", "comment": "Malware payload (NetSupport)", "value": "1126bfa22faadc9f8cffc027d2694f45cbfe0527b1940f8684932bf7d99eaecd", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773657970, "uuid": "ab893777-3a1f-42df-b6cf-4d986bb0f46f", "value": "T15AA5333430C3DD60F11EEC372C41A922BEE2998565A781F3AFB53D36660293BE19D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773657970, "uuid": "f3f3cafb-a5d6-4b6e-882e-94ec99091325", "value": "49152:5t0ZYnir6iOCtOEWb67u9lApvv2HpMDUoh8wyIFn/C4y+:5qrGREokeHpMDUM8RIJCY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773657970, "uuid": "9abe6b74-0850-40e8-aeda-9085c918fb75", "value": 2240063, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773657970, "uuid": "87fbdd2d-2598-4ac5-b31a-477340ee912f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "087c3759-2133-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1773663849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773663849, "uuid": "0dcf7b9d-2667-4d48-8c43-0fd5bf95f1d6", "comment": "Malware payload (Vidar)", "value": "296d8732e057a6d4f4bebc4cded675c7", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773663849, "uuid": "41f41a15-9bd2-4e03-a3da-5fac1e92b847", "comment": "Malware payload (Vidar)", "value": "4257e836bc6a87e4b17724c157ba8f14646c7816aa5834e6ff6d84f6686ca556", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773663849, "uuid": "43c4dadd-bee2-41cc-9395-f74d99b6eec3", "value": "T1FAB57B0ABCE508E6D4AA93328DB761927B71FC590B3223D71F94B6782E727D0AD753", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773663849, "uuid": "f3632b40-1f1e-453f-a7f6-33397dd48280", "value": "ebc247a77b4d4a804b261f97a1fd075c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773663849, "uuid": "d0b1d7e7-8e83-4dbf-81f8-7d9f3f1f0db4", "value": "49152:J4QJkyWaIkGRGZaEFLgs+sJSH7y9FVLKIBa3:J4m04ZaEaiJSbas", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773663849, "uuid": "8c4b25ef-9f93-469d-9fa4-0190c8283a66", "value": 2322944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773663849, "uuid": "6d5a9da4-6a10-4c6e-9496-515815336179", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b433de2-213a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773666967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773666967, "uuid": "d3d7f460-2fe3-405e-9cde-7979b10028a8", "comment": "Malware payload", "value": "231e27a07313a98a0aef7319b42c2d7b", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773666967, "uuid": "bdaf004f-6aee-47f1-85db-73ef7cca5438", "comment": "Malware payload", "value": "7b261029fc9d8915a8061ba064fae14c54c7b863c6c5259020d954fa90b5a1e0", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773666967, "uuid": "c7be853d-8c56-4d72-a411-e8485075fa97", "value": "T162268D27E2A360FCC56BC1709747A632FA31B8490434BD6F4694CB313F66E505B6EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773666967, "uuid": "62446537-bb33-4d06-b537-9243651d684a", "value": "0e9a37b49643be36278bdc024d76fe70", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773666967, "uuid": "78af9e88-d3cc-4cf5-827e-a7a5634d6572", "value": "49152:cVcxtt8wCfMCQNzotmndnBq3RYMARnGIDVKuKAMcn15ypry86APkrwDRGLrX5PTE:crkCztQq3RBed1Xh95I7OWEMKvqXljR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773666967, "uuid": "357b3b37-74c7-4832-b8ef-cad2f3d41bb2", "value": 4482560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773666967, "uuid": "406f83ea-8466-4a69-aae5-19982ab89b0a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a909b2a3-2144-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773671420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773671420, "uuid": "ec4b2a6f-c8b6-40da-a583-fe07c12efa93", "comment": "Malware payload", "value": "e0fef854f2c65fb2c61297a8ed607fed", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773671420, "uuid": "8b34af57-bab0-4af9-a922-dd548ce6c3c6", "comment": "Malware payload", "value": "a1a2fd54d5a3580c5381213073c5ae4c260003a5210d82d7a9c9d89ed7abbc18", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773671420, "uuid": "dc660736-251f-48d6-b674-26a0199f5bfe", "value": "T1EFF2DFA467C0D40366CE4F63BF16BDECE42AA87679C4A907D2547AAC28BC507C1E4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773671420, "uuid": "2b9741ab-5bbb-49bb-be78-ca7079803d31", "value": "768:xi6iWfP5e+ccyDldNP3SL+gEuIbsi/9/I031snMBa8mGHOJvbPtoz:EIe+cPDld93SLCknuGvq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773671420, "uuid": "cbd257e2-164d-4c63-9ef5-f56ef30cd3d2", "value": 36346, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773671420, "uuid": "2d844c49-2477-43e0-8a7a-e736ee53fe37", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07a97226-2146-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773672008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773672008, "uuid": "9ed7802a-ee59-4c71-bab7-3ed06c566973", "comment": "Malware payload", "value": "9912b2006df4c6af4569e47280b175f1", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773672008, "uuid": "c914f797-226e-4e47-9a40-0dcd16eee654", "comment": "Malware payload", "value": "a6d71baee8fb4d53b25bea864c4ad0065b5591df99ac4b6fc4b791e46a374ee4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773672008, "uuid": "5a912be9-2e64-4550-a7f3-aaae0a6ca7e4", "value": "T13634F1BCDFE6ECE11870527A345682AFB12E6288A3C887F5443B1F767184F5105AE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773672008, "uuid": "086742c9-7160-4748-b31b-18ac2974174f", "value": "6144:9If+w1bRAS7zj8dBmyePG1cfJDJ9J+OyOoAp:9ILVAS7cJQG1cfr9L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773672008, "uuid": "003a1574-922e-4605-b232-890ced82832b", "value": 247874, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773672008, "uuid": "415bece0-a0a2-47ae-85f2-aaf739830086", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d80e9ede-2147-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773672787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773672787, "uuid": "e4cd31e6-0def-41a1-aceb-5e3f82ecefb5", "comment": "Malware payload", "value": "9c4ca35119803b590867a770a25ce857", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773672787, "uuid": "4ce7e938-21ce-42c1-abfd-2b1649a48edd", "comment": "Malware payload", "value": "6b876a6ea7e51ff6efd79e4fd32af0c8d5758878a3d1d9cd8397138a054a867e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773672787, "uuid": "fd984f90-b3cc-4e23-8e43-4057116db01c", "value": "T12582E07AEFFCB1B3389A5A805325C277231891730493D50EFEC628100B6E5CFA4294", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773672787, "uuid": "f25ec174-a3bb-45c1-85e6-3dc8955e567c", "value": "384:fEcM9irloj235Fz+XohtbY2T49h8ga5QARqCEBDQhFTHUfzXZdIjOAcxGZ:hq23Lz+4htbNT4wP5pqCEWhFGdIXcxGZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773672787, "uuid": "45782807-a3a5-4eaa-ad4a-b8597512dfde", "value": 19200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773672787, "uuid": "543daf60-871b-4da9-a684-63240fdef5da", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d998fcdb-214b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773674508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674508, "uuid": "ba84ee82-842e-424a-b38c-32ff5724bf32", "comment": "Malware payload", "value": "ed14e1532a7047a18e490cbf623f2e64", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674508, "uuid": "a750dbbd-5e16-4d34-9e99-1790baa6941a", "comment": "Malware payload", "value": "cebed3d3b1df079c36b25574af0c623c2548f793382a414590eb14da1529b1e6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674508, "uuid": "0095055b-b724-42f1-ba14-a65058dff833", "value": "T1B293093274AF052A166F436E80427B1CEBA982DBC600DBE8F4FD51595FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674508, "uuid": "7d234ac5-6b3e-47c9-af29-457a1149914a", "value": "1536:pmyp1tF/uwMmAIa14oXusIcepeV7tb73WAxCJCStkb5fv2v05x9krfi1EsCZKV6x:pfQI7zEStkbFv2v05x9krsEsCZy6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773674508, "uuid": "2d6b46a2-b987-436f-bfdf-037061a27c7e", "value": 96308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674508, "uuid": "6e38dcab-1aed-48e5-927f-4971922cc5a9", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0af659e7-214c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773674591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674591, "uuid": "e8e6cabc-3a55-452e-9936-a4d83fe6a991", "comment": "Malware payload", "value": "3d9fcc8aeba51579929fbec9bd4a127f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674591, "uuid": "7f0ac66f-b7fc-459d-9279-72e4d1aebf58", "comment": "Malware payload", "value": "ff02c8b110bfb706495ddc4f7c323fec020253148cddade0e00e77a7097677f4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674591, "uuid": "1442b4a5-00de-401f-bf50-abf22b163b28", "value": "T1C534E0C2807182C2B3ADB7E4490A9773FE31BFD4765061CF62DE2269D85625F06335", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674591, "uuid": "8561c760-9997-47dc-b469-598dbf12922c", "value": "6144:bvfkjkrsLofbWM6wRFgmO/SvD+ljXPEW9qF3yWfhMxwxVlyu:LrrsM8DVhPEW9eCahAwF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773674591, "uuid": "4d1f1553-2159-437c-87f1-2834e89e4402", "value": 247896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674591, "uuid": "6583e9f9-717c-4439-a505-f35c4f7b220b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "504d53c6-214c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773674707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674707, "uuid": "e688563e-9563-4bc1-9d27-cefdb38f54bc", "comment": "Malware payload", "value": "1b37643c7ac8a8d2a42860d27526fc6e", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674707, "uuid": "602a012d-e220-45f7-b328-f1a77a8e17fa", "comment": "Malware payload", "value": "283a494dbe4651b67cd531a489bbfb8f6aa316c77dee21223a33e12918b68cd4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674707, "uuid": "e94d39e8-b486-4ee9-b333-266d7233f620", "value": "T178663335F49D18C1E837E87FE1E12AA1C3D73309D246947E92627BC8B2D17CA048E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674707, "uuid": "2656e4df-0b19-43b8-bed7-5d0f85cefd1c", "value": "196608:+ZftBf+yuv9tI0uU+HB/OGUElH6XU8YYlbHXUz:+BPf+Dv9+rU+h/PUEl0U8YYlbEz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773674707, "uuid": "614cf540-5a93-496c-88bc-16236fc5b98a", "value": 7078482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674707, "uuid": "84c620ef-ab78-4875-83c9-acae40a35d8a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "886dbb10-214c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773674801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674801, "uuid": "0cfaa7c2-e9c7-4fae-a43b-dd9a484587ec", "comment": "Malware payload", "value": "3166c0a6949f3ea39a5f30c8e98284a3", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674801, "uuid": "e82cd8fb-4a45-4384-a82a-7694b1112969", "comment": "Malware payload", "value": "203b1d522229ae7793966a9ce9f6e5f39c6ca4af14f59e8146e3b7ed6ed96a6c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674801, "uuid": "037aadaa-4051-4768-b861-ff129d1a4c8a", "value": "T15F8309327488582A210B428FD267336C70AFDCE2D611E5B5F6F632344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674801, "uuid": "b732666d-253c-4e46-9b56-99be9b482515", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnEWaGVN/:XEKltp9txAX/yr2pbEWPVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773674801, "uuid": "859770cc-44b3-4a0b-ab41-5919a779634d", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674801, "uuid": "2e831dbb-d246-4d9e-b128-5515b4992acd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f7d8c49-214d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773675189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773675189, "uuid": "50680c61-023b-49bb-ac80-3d9d87df3e90", "comment": "Malware payload", "value": "b8f02a904c2a6cfcdf4cd6beed40a719", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773675189, "uuid": "dc14860c-0b65-42fc-bfd6-dffc69d8142d", "comment": "Malware payload", "value": "49a3d593487ce325581f312c7e96b35e95b2faf3506dd6af77ef808594503b6f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773675189, "uuid": "8919fded-9293-4e4f-b343-c77164e140c1", "value": "T17FD31A6F93FA317571178359F9E6772492ACC133EA410EE2F8B6865C8FC066201B72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773675189, "uuid": "2e2f0a8d-b3ca-423b-8a70-7e1e9b28cf26", "value": "3072:X2l4k2w754UsFufxQB/r4KIIinxtPh6I7W4Kxk1w75PFBJFQskutIxYDEePCJl7m:ml4kd54UsFufxQB/r4KIIinxtPh6I7Wj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773675189, "uuid": "cea4d368-81d5-4e5e-9920-6a84219655ab", "value": 133682, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773675189, "uuid": "9291ecc8-3789-46de-a374-c2a2677181e1", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff42ee78-214e-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773675859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773675859, "uuid": "b1c9d96b-f327-4328-a2b1-825fb5b61317", "comment": "Malware payload", "value": "472373ebc24873bd47ff38e5f4a59099", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773675859, "uuid": "42111bf7-0db1-4597-994e-3facd7c763f6", "comment": "Malware payload", "value": "5c23845f6923c73ba27f1bfc20918ab9c9fd4131cd8e1b7b0ab5d8d60a016454", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773675859, "uuid": "1dd2448e-f3e7-4487-883b-6747dbf0d6f7", "value": "T16D2833D61FB0C919C5D6BE331292BCE7223C83437B82846D4AD6325309FCA797F595", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773675859, "uuid": "bc823133-3907-4d47-a249-62e11dc5726c", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773675859, "uuid": "c4a5b490-2e0c-48b1-9476-dfa19018d2d0", "value": "1572864:ZYxcfesquEqemJH9GIlFKT4foTuwwwXYPDwmjA8d+5ZW1e/W5JG4km7:6qesA6d3TKkoAPxkIIaJG477", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773675859, "uuid": "1878a6be-f23c-4112-aae0-18c219cc5985", "value": 100948756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773675859, "uuid": "01117938-1dba-4dd3-989c-6bb4b0ba2e12", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3934287-2150-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773676645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773676645, "uuid": "2453e0a2-45ed-4c16-8cb3-a0ec1e65e206", "comment": "Malware payload", "value": "233a62b5950fc37636ffaa129d95aafb", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773676645, "uuid": "14dd3b73-27d5-44fa-815e-4523fbfeb2a6", "comment": "Malware payload", "value": "e15de690855cd23361af69a71b60d4299328582e2772b6eb25a3cc96617a8f59", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "AmateraStealer", "colour": "#fdc472", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773676645, "uuid": "a01b0924-a726-4d15-8292-00cd904cdcf5", "value": "T1F4F56C27F288713ED06B3B364A3386909837F76179168C2797FC794C8E365942A3E6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773676645, "uuid": "de311ae8-2dfd-4f2d-b532-c83bb672a3d5", "value": "8507116e3d0e7e02e36e7dc5b8aa1af8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773676645, "uuid": "0d1ff8cf-98a7-4c95-a610-2f52ff1c88a5", "value": "98304:utLutqgwh4NYxtJpkxhGL3332Dyd9h5fH:bxOxtJahZynh5fH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773676645, "uuid": "7bde9977-245b-4dfa-a579-eb8594d86f8c", "value": 3630960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773676645, "uuid": "6592fe19-cf6c-470c-b428-b8a0553a470e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccdecb2c-2162-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773684365, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773684365, "uuid": "6d049bb3-0651-4f4b-8e49-a5ce2b1530d3", "comment": "Malware payload", "value": "d797a226ffc101d51b7dfb7e3abf59ca", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773684365, "uuid": "26496cbd-4bda-43a9-83e8-2af3421bd845", "comment": "Malware payload", "value": "e4efaa6586a5310803584d5387e63c69665eeb7bb459e94a2d57c6efd6f85b6e", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773684365, "uuid": "74365480-71e8-4b95-a7c4-667f08c3c038", "value": "T18592112214E28FF903F4BBAFD49645386CED34DB1279D3395A2A9F8CE0D696744C09", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773684365, "uuid": "b1e0877a-16ec-466b-a223-85a20d77ac9a", "value": "192:aul8sNY7heglv+LOXcZIpTSglgFdJA8IRZAqoA7CPh+Xguf4vGh0zj2BdDrNsyA8:vNsmLGcIREFPh+IYBdfjLszNvu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773684365, "uuid": "2d11a6fb-fd21-4dd7-9a33-13a8d019d0e3", "value": 21103, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773684365, "uuid": "a366af90-708d-4951-9a90-34fdbfc60e84", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "067cd465-216c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773688327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773688327, "uuid": "b6d240b5-ed34-4946-b73d-038ed6248e45", "comment": "Malware payload", "value": "0574d4b7b42c39b918d0d58d149c9438", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773688327, "uuid": "f831186f-62b4-4c4a-9de8-b12ab7ae82b1", "comment": "Malware payload", "value": "1480dabe89af53f798ac93d4606d37ad8a1e6938dc054460ed4d8548f5e18d70", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773688327, "uuid": "b2f15431-5e0c-4287-b1d7-47b95dfbedfd", "value": "T1863523A66CD64F9FD4C70A39941BCD0CC35FEDCD2287E12BB2197621683673A66871", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773688327, "uuid": "bf49ce69-8fd1-4094-9703-43ba9e7a4a7b", "value": "24576:yZ2LFcFJTiY8fg0YwtFPS1O3Icb3O6fpAJgMm8aWzy:yMFcF0SYVS1OYOO6BAHJzy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773688327, "uuid": "f1fdcc00-26a8-455b-aed6-61c66fdf5c63", "value": 1079808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773688327, "uuid": "6c8929c4-604b-4205-bb72-c00e9babf467", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2aa033ae-216c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773688388, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773688388, "uuid": "7384c3f5-7f80-4d0b-bfac-2c0ece62f739", "comment": "Malware payload", "value": "9a72d388dd1ff5c36a44c14c907bc3a0", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773688388, "uuid": "7db8425c-130e-46d5-83bf-418e580698d4", "comment": "Malware payload", "value": "db640712b6bc2ee316ec5e13cf2de147abf1155dcf4bb2d76760752a01b00fac", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773688388, "uuid": "6c9d7a37-e83a-4528-b86c-466e9a65111f", "value": "T14096628FA2748613C8E263B5B2063572BE2AD435479983777CEDE435319F0BE4A728", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773688388, "uuid": "c049a4b3-ba81-48cc-8fe4-605a8ea86c54", "value": "2c1853915d316a65d08a8dc489aff101", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773688388, "uuid": "8fa416e8-10d0-4c62-8b46-109161e9c26e", "value": "49152:aR358EQX1xQBuFDbHW3Tc+C7L3LFs9iByECgKk7B4pd9U3lleDRD6lHXV6LbHLgW:kUo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773688388, "uuid": "6e26015e-97f3-4906-b122-13450a45bef4", "value": 9350144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773688388, "uuid": "a59def5b-0ac6-458f-a08b-a06e542f1576", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84adc873-216f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Smoke Loader)", "timestamp": 1773689827, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773689827, "uuid": "c960faf3-8d47-458e-a61f-24bdd350a48e", "comment": "Malware payload (Smoke Loader)", "value": "f7319ddc9667ade201708eb05c5fbbff", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773689827, "uuid": "548b94f7-9a30-4e7c-9e98-4fb93ab02ef0", "comment": "Malware payload (Smoke Loader)", "value": "db31edf10486b5c2fc4320d6e84128b356a0b1266e65cba8bdab10ecad94abf9", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773689827, "uuid": "2d5040df-7f4f-412f-b1e5-007931ac67dd", "value": "T1E1243A67C25331FCE513C078936A6232B772BA3C47759EF70292D7349E22AD05E7A6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773689827, "uuid": "7c24da16-afe1-4db4-9e93-d7fc103a16de", "value": "c81db0a320cdad5ab41c9a291ea9b6e9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773689827, "uuid": "79a96be7-2130-44e8-9d7f-3561dba268d5", "value": "3072:6fbVJDkZeYmB3KhLp+TU9x8xxycC/rOD4r+1pi6XIqQtvhQCoc6:YJDsefB3Kxp+NyBtq6hM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773689827, "uuid": "44a38414-b434-4fdf-8b0d-0bc75dc25a61", "value": 226304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773689827, "uuid": "568e9dd8-7ab5-4933-9dc9-c11f502e7c6a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79b3b256-2171-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Stealc)", "timestamp": 1773690668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773690668, "uuid": "c5cdac1b-1c2c-4bd6-be9e-41bb0e00a369", "comment": "Malware payload (Stealc)", "value": "12f46b8e24880bf4e582652ccbdffe95", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773690668, "uuid": "555eb95a-6fcb-4b7a-9d6d-d6b66585b2e5", "comment": "Malware payload (Stealc)", "value": "5f64ec49c18d48fed8977900da478c49395a4ab1390057b68c29c8067efefe36", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773690668, "uuid": "9aefa1c1-7ef4-4e89-bde6-768874b4b824", "value": "T1E2B59E167CD144BAD0AAA332C9B751A2BB34FC090B3227D72F91A6B83F76BC059357", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1773690668, "uuid": "4ba37f20-75dc-44df-9da2-4e4f3d62591d", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773690668, "uuid": "1e71b20b-ae4b-4adb-bc87-52838f84d45b", "value": "49152:+KiWqsoO4g8CwiHiq00U30fBCjz6KNPWoOE:+MDjZCdl0fBwx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773690668, "uuid": "8198e478-206a-405f-a88a-fa453bc34926", "value": 2329600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773690668, "uuid": "d6775ba2-337e-4082-af66-0025ce08f08c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2813e9d0-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773691819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "fad7eb21-5f2c-4146-82a4-a821395afaf4", "comment": "Malware payload (Mirai)", "value": "01b56e20b4293648e9d10eb8b52a27c6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "424a8eda-08c2-406e-a53f-711d8ad9e735", "comment": "Malware payload (Mirai)", "value": "6be04608c78308f6b3cae6f4d18fcdc0a41220d7d8ed1a1819718d67a4e271dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "de416630-0e30-4d63-96ad-57edcae934c6", "value": "T1FCD3D81E6E218F7CF799C33507B78E65A258338637E1C585E19CD6002E6038E685FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "cda7d39c-cd32-4f61-9204-993e1691e2de", "value": "3072:Y4kokXIXV0HrrzbdCj/dsozySn7StXtqpyB:Y4koQUVsjbdo/72MoQpyB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773691819, "uuid": "58eb6417-07be-41c8-bfc7-cd49e86fa20f", "value": 131796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "3e7a3bdd-be88-441c-8e0d-7fe28f192631", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "281559bc-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773691819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "79b635e7-a1db-458d-a9c5-6eaf71d0f041", "comment": "Malware payload (Mirai)", "value": "d3e540d270cce07c55a5f9a6478bd296", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "78e1669e-db52-4cd4-a38f-56c95f1fa540", "comment": "Malware payload (Mirai)", "value": "5d3be8d57011dc8850fca7963dd9d8974a2a88146694278cea3f6166a903dddd", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "12fd623a-893a-4ad0-ba9e-4448ba440624", "value": "T10EB33991B8819A23C6D123BBFA6E018D332653A8D2DF7207DD256F2477CA92F0D776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "0724a61b-4ec3-419a-9353-d3d07024faa3", "value": "3072:4WODb6IHSu1f/Wsc4ioDFI3MlnACEUYP:4WORMI4MFAvP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773691819, "uuid": "69287b66-681f-4e2e-bf53-3ec29e18d6e2", "value": 111936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "2839ff3f-f87a-460b-8fc3-0d20c183760f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28165d8f-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773691819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "ef15984a-6762-47ac-a58b-618b52d06231", "comment": "Malware payload (Mirai)", "value": "6660f17d18767d7ea0d9bbe1aff6bc07", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "617b7dbe-f5d3-4a04-bce0-f25f4db0ad0c", "comment": "Malware payload (Mirai)", "value": "6337146d43b07b428fd4250905683d1b5e1914ab9e2480ef018bdd4e6a1c769b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "a80bfce9-a8ee-456d-a5e6-0398855a580c", "value": "T18C93AE73C41AADD4C5558634B0F29AB95B63E404829B2EFA9ED9C1BD4083EECF1053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "860910a3-737c-4d2d-9174-f07a17862f30", "value": "1536:mmtJm6pEALwtLsoBS+5prvnniRBTKG/Q4XY+aeCf0RgH54b:muJm6pEW0r7iR4GfYZeZWZW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773691819, "uuid": "da9a5e33-d432-48a2-9720-a088c34a1edb", "value": 95608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "8ab8367f-b3b9-49e3-afc7-fd5cc14b2196", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "281b5012-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773691819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "02eab46f-b44d-4960-a4cf-5c7329c7219a", "comment": "Malware payload", "value": "bf086e643736fd6bba96d03b0c596152", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "f6bd4da3-db75-4cc1-92b3-550729a5fd42", "comment": "Malware payload", "value": "dfd0ae045f59c9e099db50f461abf60207182e3a2f8a3be02fcfd9dae7e0e2f6", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "b23b2243-581a-4ca0-9306-e4d2c1f3d9de", "value": "T1C84153EF71F2683392A8CE5CB8A0C90D540654BA79EB7A24F8F81418D598F1570E47", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "dd477d2d-5535-466c-86e2-d11a4e927933", "value": "48:sYh58y0mQXpN2Nn5UEB2VxQ9MeM9YNHg3mAnepH:/IXMtTg38H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773691819, "uuid": "9c39c9b8-9a9f-49f1-8bdb-ce1722b1e311", "value": 1999, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "1bddf0c1-fdbb-4235-a0d0-4cb4db1c3087", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "281e918f-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773691819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "c06b4074-aacd-4ae0-98c3-b3a85a3bec48", "comment": "Malware payload (Mirai)", "value": "b9761c732be0eff63132e8ca1c5221e8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "f466fbd7-f5ed-4847-a264-4d0c05d26d11", "comment": "Malware payload (Mirai)", "value": "e87d53ec6aeea1037121ef8c15ae1bc1976f4645bfd0665eb6aef62bbb855766", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "e1c79d6e-0c88-4367-a55a-72f8c7fed459", "value": "T168B35CDAF401DE7DF84BD7BF44230A09F530A35046931B2BA356FDA7BD761A84912E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "957e48d1-687b-4d59-a6e0-c8bd6fdf6c4d", "value": "1536:UISzQpoc3HdB2XQ4lAIxR4FglS8C3H612GodDDqMwXWK/zKaZzDz:wQB39B2H9R4gle3GaDGnzKaZvz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773691819, "uuid": "a60ed318-2d83-4fcb-bccb-44e1abae1316", "value": 109700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "9200df39-e603-4506-8221-9ebe7190e0e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2820052e-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773691819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "5b217355-667c-4d18-b8ed-29a5275ded92", "comment": "Malware payload (Mirai)", "value": "1d34697c6c11fc70917b424b7b37e960", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "d407d9c3-72a3-4163-a025-adcc1827d642", "comment": "Malware payload (Mirai)", "value": "ca418aaaee871a8ec507123c212e8f8f45025be37b71f554f7afe29d1001dd2e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "725b3218-a90d-4eeb-b155-6ca4b758b9bb", "value": "T102B33A96BC819622C5D023BBFA6E018D332663A8D2DF7207DD216F6477CA86F0D776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "8456d47d-b43b-45fc-8e4e-964ff9ad93ef", "value": "3072:s2m1X4xXeCXr0+9qX7Ptw/QnSoGRwRrigon:s2oXO7qXZXGRwRbon", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773691819, "uuid": "caab56f1-6dc3-4e6d-9eb0-2ea1f6f70625", "value": 107840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "3c586f3f-1bc1-433d-8d17-f5afd6f5f727", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2820ea65-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773691819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "0f13bf17-3c69-4b09-b7ea-20c138f11463", "comment": "Malware payload (Mirai)", "value": "4cf66a300fed50cee99f9e0809286da3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "db8685a6-855b-4a2b-8ca2-e25f9cb58a61", "comment": "Malware payload (Mirai)", "value": "67a44487277141f05a0fb3a25637f827c49f0a6aef356be24c07f365515d5ccb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "28b1fbb4-cc66-411e-9abe-b3137487e4e9", "value": "T197A34B4272180A87E4A35DB4253F17E093FFE99020F4BA84695FDB5A8232E771586F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "55722c15-0690-4c35-840e-7561dfba7c10", "value": "1536:HIgf88tw61bQjZP9Agw1yUcA74Dqh6zgRnoIfFv5ADvzNlcDMa:7gZPaga72ZsoId5K3a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773691819, "uuid": "6f8b586c-5ee2-4770-81af-cd6b24121961", "value": 103844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "e2a47bdc-1a5a-4a47-9bef-08620d1871c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2822f2af-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773691819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "3ac5cd59-51fc-4367-96e6-03293a423df0", "comment": "Malware payload (Mirai)", "value": "6297012b54793af36d39eee4411e85e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "899aaf88-68a2-481b-aafb-97dc27971826", "comment": "Malware payload (Mirai)", "value": "42e5a91f5362ac9f43f759647124ff4a37863bb7d0780d20a99bf99e33f9e3d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "034175ff-e9bc-4855-85e1-17eb7ddb43a2", "value": "T1B8D3F506BB610FFBD85FCD3706A91705258C691A22F97B357A34C928F64B20F1AE39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "c18bfc80-5d15-486f-8f13-ae36dff6037c", "value": "3072:VnnEUf+xtlCaFTdyU+Mxd1K1gYnxWBsxW3fjKSlQxbVqi+4XNV:VnUJ5+Er/lQx5XN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773691819, "uuid": "bd85c8bc-2179-4404-a128-cf062f91e89b", "value": 135108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "5481c962-a27f-4bce-bc6a-d053c4e1befd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28244286-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773691819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "ff1475cd-704c-4be8-be97-e84b3494ea89", "comment": "Malware payload (Mirai)", "value": "6ef6511c7f60593473c410661275932c", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "0df8d24b-f381-4479-87b4-38368cec8506", "comment": "Malware payload (Mirai)", "value": "1b930e099c2cac553b2481c0f2fe1b3181d7351ac5b88a0a1e273021d14595ef", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "4fd8d7e2-dabe-48ca-9054-f09a090c71fd", "value": "T16FB31896B8818A11C5D512BFFA2E018D3313676CE3DFB2129D146F247BCA92F0E7B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "e59ac1e0-42e6-4dfa-a1bd-66bbf9585758", "value": "3072:oc9D9tNkLwnoF8ZfW7nsmyTacabXS2sXulv+Y6:9Z9tUEys9TaZbUXulB6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773691819, "uuid": "382ae814-9e3c-4208-9a0f-9d4460d87c91", "value": 112664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "477ea127-700f-476a-8948-b09119c8041a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2824e5e4-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773691819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "3cf36b7d-6457-445c-ad46-5ccb534bf0af", "comment": "Malware payload (Mirai)", "value": "6a3c2e8733d853844b645f1396e8e964", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "537c3761-17a0-4a66-ae60-e406078c52da", "comment": "Malware payload (Mirai)", "value": "3e058adbfb09f1ea8b617830b691e7b3815f705b448ec82221b44c25b6f89c67", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "e2835671-765a-4ff5-a0d2-fb71e0731367", "value": "T1CF144C46EA814A13C0D627BAF6AF01493333A768D3DB730699187FB43F8675E0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "49da64fc-5f14-4333-9d03-a6447b0e8745", "value": "3072:866jekvB7H4DUKXcqZhTQnak90JPmdexJTvUMRFHPtOsALSDRM/9EiwzR:YekZIz8naY0JPmdeTvdFvtBALS9M/9h0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773691819, "uuid": "310b46c2-8a85-45e0-83c5-4ca1f33728fc", "value": 193207, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "0e068a02-491a-4097-b9fa-dbbaadb05b98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "282e1466-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773691819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "9b87ebb7-6eff-42c7-88f3-4aaff6597743", "comment": "Malware payload (Mirai)", "value": "a710e69c706e38d3779a38517e7a8388", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691819, "uuid": "3f556d6a-04c6-42f8-b8fe-850c12bac387", "comment": "Malware payload (Mirai)", "value": "4f16b66362efd9becdaa0a71762c5f1d6def9744f68eb912cd96b1e6916054de", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "0a0c7e90-3bad-4ffc-afca-b5db89ab0b0b", "value": "T136B35B3279792E27C5D0A47A22F34760F2F2578A25BCC61E7D720D4EFF24A502117A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "c9c661c1-74fd-4c99-91ce-b9c5e7c38375", "value": "1536:XSRrW5Y31OGa11S2SQ6xtwfzpNphi7C79L+zz9AnKtOVYM5YS9g7JwttPH2I9:CUqQ6xurpbNKYVY8v/D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773691819, "uuid": "9161a14c-6e4c-4640-bfa8-3a484cb24556", "value": 107848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691819, "uuid": "843cb3c9-9edc-4bb1-affa-9bf4bbc33001", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b9e7cc0-217a-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1773694563, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773694563, "uuid": "020da4e0-654d-4d32-9cee-a41bf32d1f1c", "comment": "Malware payload (Mirai)", "value": "1cd0dbb9b4424004e692731b450b1cbf", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773694563, "uuid": "60b87ec7-8083-4d4c-aab2-ca6672a98ba2", "comment": "Malware payload (Mirai)", "value": "9ee133f3a3b6e320789a7f8a23559aa4128107e6038ce4b447b2acb8291ea4d4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773694563, "uuid": "638c6b18-2680-45a1-804d-1d1dff342b5a", "value": "T1BA043B56E6418B13C0D7177AFAAF42493323A764D3DB73068928AFB43F8279E0E675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773694563, "uuid": "3c046f6f-fd11-44e1-bbe2-1f7be3eebfef", "value": "3072:3USOQge2sY4zaaQ+dP6DU5OCW/rDef/83FiA7yCpLeRhzM/9N9y+J:ESOlsZaaQ+dP6DUPW//Y/YFf7yCpLeRo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773694563, "uuid": "89903ed3-bd65-4469-a2a6-f9a07ca0036f", "value": 179845, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773694563, "uuid": "2902f599-a9ea-4fb0-8c26-4c69ea59a9e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75120fd7-217f-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1773696673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1773696673, "uuid": "b3fd14ef-ca39-431c-bf13-49f613a6afb4", "comment": "Malware payload", "value": "084478fc0ac318ec95aae16038ff436c", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1773696673, "uuid": "0f4e3e02-58e9-4ca1-9242-72760d188525", "comment": "Malware payload", "value": "a38205f35bb10fe7c8315ef564543db1bf06ed728c58112c14f4c50fdd1be673", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1773696673, "uuid": "f2221587-cd22-44b8-9ed7-3717a08840c6", "value": "T184B423628C357888DEDD8F31F5374E2E2BB28F64271A8647DB9156380AF04541D16F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1773696673, "uuid": "45e6d49b-e975-41ae-8baf-38fd56ac8bf9", "value": "12288:OGhSu9JUjI1yAHnS5D/Z2YfCet5o6v+7cswoy2b31ByXXSEl6KvZ:OGkfuyunODR2GCO5ogLsw71Xyk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1773696673, "uuid": "1643d97c-f726-4e70-ba31-3d31567656db", "value": 535878, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1773696673, "uuid": "09cd7b71-92fe-4187-8732-1e28218fdb2b", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773619327, "uuid": "5f2cb945-20cb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://t0-node-edge.ventonovo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773619457, "uuid": "acc8f409-20cb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.247.183:43935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773619513, "uuid": "ce6b1608-20cb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.224.62:44774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773619514, "uuid": "ce95be9f-20cb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.252.133:53841/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773619584, "uuid": "f871de21-20cb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://99.154.56.170:38138/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773619628, "uuid": "12f24ed8-20cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://k4-sync-auth.ventonovo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773619987, "uuid": "e879e810-20cc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://w9-dist-meta.ventonovo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773620347, "uuid": "bf4b2621-20cd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://m1-infra-static.ventonovo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773620650, "uuid": "73a22582-20ce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://v7-srv-gate.focozero.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773620946, "uuid": "247536af-20cf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://z3-app-data.focozero.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773621366, "uuid": "1eca5727-20d0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://x5-web-proxy.focozero.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773622028, "uuid": "a8f6038c-20d1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://c2-core-sync.focozero.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773622044, "uuid": "b2f6c8bc-20d1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.48.141:37530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773622047, "uuid": "b4abef99-20d1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.107:42109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773622146, "uuid": "efb07ef8-20d1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://b1-cloud-store.terralibre.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773622332, "uuid": "5e5e6973-20d2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.138.219:34258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773622387, "uuid": "7f1112b9-20d2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://n8-api-remote.terralibre.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773622454, "uuid": "a6f7bb68-20d2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.243.172:55802/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773622509, "uuid": "c7d531fd-20d2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rizvexeno.ws/Bo%D0%BEtsta%D1%80%D1%80%D0%B5%D0%B3%D1%85Ul.zip", "Tag": [ { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773622687, "uuid": "31f13337-20d3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://q4-dev-host.terralibre.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773622813, "uuid": "7d39e552-20d3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.107:42109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773623047, "uuid": "088f0210-20d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://r2-gate-entry.terralibre.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773623056, "uuid": "0df89184-20d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.113.147.231:44113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773623176, "uuid": "557d339a-20d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.48.141:37530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773623196, "uuid": "61ac9be4-20d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.210.212.26:48778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773623238, "uuid": "7ab4b045-20d4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.59.132:48496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773623947, "uuid": "2159b40b-20d6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://p0-link-power.ombragrigia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773624100, "uuid": "7bfb9346-20d6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.124.226:56433/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773624188, "uuid": "b0839a16-20d6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://h3-hub-local.ombragrigia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773624369, "uuid": "1c630fa4-20d7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://j1-flow-work.ombragrigia.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773624666, "uuid": "cdd5b32f-20d7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://d8-net-global.velocicorsa.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773624801, "uuid": "1e00d9c1-20d8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.101.204.41:55204/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773625028, "uuid": "a57c6479-20d8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://f4-base-infra.velocicorsa.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773625446, "uuid": "9eaa57d5-20d9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://g7-db-point.velocicorsa.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773625516, "uuid": "c85ad4fe-20d9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.22.244:52117/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773625688, "uuid": "2ede8bc4-20da-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://l9-auth-user.velocicorsa.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773625823, "uuid": "7f569f6c-20da-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.9.66:50556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773625929, "uuid": "be8c56a5-20da-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.233.136:46890/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773626046, "uuid": "045daecf-20db-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://y2-trace-alpha.duronodo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773626184, "uuid": "569d24ad-20db-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.101.204.41:55204/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773626779, "uuid": "b8d203ba-20dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.65.224:34549/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773626830, "uuid": "d7688b13-20dc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.205.61:39747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773627322, "uuid": "fccab197-20dd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.0.118:59093/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773627383, "uuid": "2124a302-20de-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.9.66:50556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773627908, "uuid": "59d85517-20df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://i1-vision-sync.duronodo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773628027, "uuid": "a0c4c3bb-20df-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://v0-room-dark.puroflusso.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773628387, "uuid": "7769725b-20e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://e6-bridge-light.puroflusso.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773628402, "uuid": "807ace4d-20e0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.51.191:50321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773628631, "uuid": "09233180-20e1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.15.83:44381/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773628635, "uuid": "0b7ce4a1-20e1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.168.236.202:59698/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773628688, "uuid": "2ae869c9-20e1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://a4-scan-point.puroflusso.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773628958, "uuid": "cbfa9dc4-20e1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.163.41:51949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773629047, "uuid": "00e368f0-20e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://m8-sync-vision.puroflusso.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773629348, "uuid": "b42a246d-20e2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://k9-rim-outer.altasphera.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773630024, "uuid": "47882b56-20e4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.192.158:35845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773630381, "uuid": "1c05a707-20e5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.54.194:38886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773630442, "uuid": "40a4b8c0-20e5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.54.194:38886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773630611, "uuid": "a4f64e05-20e5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://x0-space-open.altasphera.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773630786, "uuid": "0da5c059-20e6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://n4-orbit-moon.secretovalle.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773631088, "uuid": "c1298c33-20e6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://b9-base-steel.secretovalle.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773631327, "uuid": "502133e8-20e7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://q1-core-rock.secretovalle.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773631687, "uuid": "2695c073-20e8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://r5-link-sat.secretovalle.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773631701, "uuid": "2f14e12d-20e8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.134.2:41627/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773632047, "uuid": "fd4fd400-20e8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://s3-web-infra.ferroviva.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773632180, "uuid": "4c388cb4-20e9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.188.79:58816/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773632347, "uuid": "afecc2fd-20e9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://p7-gate-proxy.ferroviva.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773632419, "uuid": "db06d4f2-20e9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.71:53031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773632532, "uuid": "1e43a6d6-20ea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.188.79:58816/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773632536, "uuid": "208ba65f-20ea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.9.29:46866/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773632848, "uuid": "da49ae4e-20ea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.14.185:56210/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773633013, "uuid": "3d120220-20eb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://j9-main-point.ferroviva.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773633369, "uuid": "10f665a9-20ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://lte05ohe.ratflat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773633617, "uuid": "a4d101e6-20ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.253.132:48719/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773633727, "uuid": "e6aabe7b-20ec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://storybroad.ratflat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773633790, "uuid": "0bcb70b2-20ed-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.10.53:53163/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773634087, "uuid": "bcf5ac96-20ed-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://channelash.ratflat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773634390, "uuid": "714fe6e2-20ee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gvo7j.ratflat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773634459, "uuid": "9a75fc16-20ee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.134.2:41627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773634578, "uuid": "e165de40-20ee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.60.14.185:56210/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773634747, "uuid": "464946ca-20ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://goo8039f.catflat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773634936, "uuid": "b739c117-20ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.163.41:51949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773635050, "uuid": "fae34dc8-20ef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ewt2o.catflat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773635179, "uuid": "47f93c55-20f0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.161.47.138/oop/nope3.johnsmith", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773635408, "uuid": "d06a071c-20f0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gard-cano.catflat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773635482, "uuid": "fc34a696-20f0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.10.53:53163/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773635709, "uuid": "83e5ceb4-20f1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://assetproxy.catflat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773636127, "uuid": "7cb2f938-20f2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cavvoya.catflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773636849, "uuid": "2b099f45-20f4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.243.35:44961/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773637031, "uuid": "97715f7f-20f4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rn1x-mesh.catflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773637038, "uuid": "9be72aee-20f4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.29.0:48844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773637153, "uuid": "e0add703-20f4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.29.0:48844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773637210, "uuid": "029980c0-20f5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cedar-focu.catflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773638348, "uuid": "a8906ca2-20f7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://api8-well.slowcube.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773639431, "uuid": "2dfcaca9-20fa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://launchwind.tunefour.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773639787, "uuid": "027c8d44-20fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sercrestet.tunefour.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773640148, "uuid": "d97f4cad-20fb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://glyp-line.tuneone.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773640448, "uuid": "8c367dfe-20fc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gateext.tuneone.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773640749, "uuid": "3fb9ea55-20fd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://talfluxa.tuneone.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773641169, "uuid": "3a77a5f4-20fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://0g94h.tuneone.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773641302, "uuid": "898b6917-20fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.255.119:60546/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773641468, "uuid": "ec1dbeae-20fe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://velnex7is.tunetwo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773641767, "uuid": "9eac38c9-20ff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ycmfs.tunetwo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773641958, "uuid": "107208c6-2100-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.171:35504/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642068, "uuid": "520ccf6e-2100-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tirs47so.tunetwo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642079, "uuid": "58acc944-2100-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.171:35504/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642488, "uuid": "4c9594ac-2101-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kel-tideen.tunetwo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642726, "uuid": "da3d537a-2101-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.181.62:8888/x86", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642727, "uuid": "daf05209-2101-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.189/sh.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642731, "uuid": "dcfbe0b3-2101-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.228.164:54039/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642786, "uuid": "fe038ef6-2101-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.181.62:8888/arm", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642786, "uuid": "fe039b3a-2101-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.181.62:8888/k", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642786, "uuid": "fe039e52-2101-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.181.62:8888/mipsel", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642786, "uuid": "fe114ba8-2101-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.237:35919/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642786, "uuid": "fe114f8f-2101-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.237:35919/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642786, "uuid": "fe115bbf-2101-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.181.62:8888/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642786, "uuid": "fe395330-2101-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.23.216:58319/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642788, "uuid": "ff09d545-2101-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.143.167.210:8080/sentinel.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642788, "uuid": "ff48f2b0-2101-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.31.201.20:52137/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642789, "uuid": "fff027f4-2101-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.228.164:54039/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642789, "uuid": "fff061b4-2101-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.6.12.101:16726/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642789, "uuid": "0006838a-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.48.214:38963/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642790, "uuid": "002a7752-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.47.215:57010/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642790, "uuid": "0038d219-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.47.215:57010/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642790, "uuid": "00710a1f-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.95.214.29:38175/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642790, "uuid": "0084b44c-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.47.251.189:17148/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642790, "uuid": "00879f1f-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.6.6.235:57610/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642790, "uuid": "009ca1f5-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.25.45.248:56441/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642791, "uuid": "00c3a34f-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.142.70.6:49677/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642791, "uuid": "00e3788d-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.248.167.23:11264/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642801, "uuid": "06e93f20-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.113:2342/bins/bins.sh/nigga.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642801, "uuid": "06e93f8b-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.42.68:49807/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642801, "uuid": "06fb965f-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:35531/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642801, "uuid": "06fd6556-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.234:35531/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642801, "uuid": "07284d6b-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.210.241:36633/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642801, "uuid": "072dad3c-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.175.223.113:2342", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642801, "uuid": "0736b909-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.77.170.38:48490/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642802, "uuid": "074e53af-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.240.54:49142/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642802, "uuid": "0759e73b-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.149.106:34183/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642802, "uuid": "0768c41a-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.141.29:44817/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642802, "uuid": "076cc7d0-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.69.80:55633/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642802, "uuid": "077b4c25-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.210.241:36633/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642802, "uuid": "07a8da32-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.69.80:55633/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642848, "uuid": "22df3ae4-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ijsbcf.taketwo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773642981, "uuid": "724993a8-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.136.14:55390/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773643149, "uuid": "d612997c-2102-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5cann5-wave.taketwo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773643447, "uuid": "88109775-2103-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rural-ash.taketwo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773643696, "uuid": "1cae5a69-2104-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.0.118:59093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773643812, "uuid": "614c3702-2104-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://partnerdust.taketwo.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773643822, "uuid": "67880cb8-2104-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.226.150.171:54900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773643885, "uuid": "8cfa2950-2104-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.177.109.227:37055/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773644063, "uuid": "f7569a2a-2104-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.152.244:58375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773644112, "uuid": "144f1bb4-2105-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://modelultra.takefree.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773644125, "uuid": "1bcf87ec-2105-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.194.227.46:49573/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773644186, "uuid": "40797bd1-2105-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.232.30:37377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773644528, "uuid": "0c3070d8-2106-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wvswfck.takefree.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773644654, "uuid": "571f3d0d-2106-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.136.14:55390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773644832, "uuid": "c19bdff2-2106-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.30.14:53900/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773645067, "uuid": "4d877ca3-2107-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ndhxikv.takefree.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773645082, "uuid": "563a1706-2107-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.29.7:51151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773645309, "uuid": "ddd04a77-2107-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fund-lab.takefree.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773645322, "uuid": "e549a24d-2107-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.128.66.77:34459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773645432, "uuid": "27520493-2108-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.152.244:58375/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773645488, "uuid": "48621ddd-2108-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ser-fluxa.omnifree.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773645494, "uuid": "4c1d4276-2108-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.194.227.46:49573/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773645908, "uuid": "431eb5c7-2109-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tal-lithum.omnifree.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773645979, "uuid": "6d3e1597-2109-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:35397/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773645981, "uuid": "6e90e6f7-2109-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.29.7:51151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773646037, "uuid": "9006c2c3-2109-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.30.14:53900/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773646146, "uuid": "d0e5c1d2-2109-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mc9wq0.omnifree.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773646224, "uuid": "ff0c920d-2109-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.96.253:37623/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773646461, "uuid": "8c466508-210a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.167.113:53894/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773646510, "uuid": "a9ef7a08-210a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ad65x.omnifree.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773646868, "uuid": "7f3c5878-210b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://timb3r-cast.highligh.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773646934, "uuid": "a6a8b915-210b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:35397/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773647171, "uuid": "339490bf-210c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://massivereagen.highligh.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773647348, "uuid": "9d29c9b0-210c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.96.253:37623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773647420, "uuid": "c7df85c0-210c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.219.32:56810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773647443, "uuid": "d59bae5f-210c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/exasuppliercatalog/iaijtgkt/releases/download/sfx44/GitProject.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773647470, "uuid": "e5ede48f-210c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://notifiersenso.gobright.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773647598, "uuid": "322e3b9e-210d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.186.57:43216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773647887, "uuid": "de67d205-210d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://plasmatransmit.gobright.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648027, "uuid": "3190ffa9-210e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.167.113:53894/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648189, "uuid": "926ac22e-210e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://6gx6.dotnet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648318, "uuid": "df2c7154-210e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.104.38:32938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648318, "uuid": "df7d711d-210e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.91.85:56735/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648366, "uuid": "fbeaac82-210e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.107.168.138:8080/files/build.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648547, "uuid": "67989895-210f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kel-meshum.dotnet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648548, "uuid": "68223a2f-210f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.107.168.138:8080/files/52.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648618, "uuid": "9203fafc-210f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.244:33415/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648731, "uuid": "d5919e24-210f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.219.32:56810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773648981, "uuid": "6aafb711-2110-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.186.57:43216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773649225, "uuid": "fbe6125e-2110-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.73.126.106:43071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773649749, "uuid": "346ecd88-2112-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelforge1al.rassvet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773649890, "uuid": "8890a1e9-2112-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.104.38:32938/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773650003, "uuid": "cbefc60d-2112-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.91.85:56735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773650228, "uuid": "519147af-2113-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://3hca.yellglass.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773650424, "uuid": "c6c0ef6e-2113-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.158.29:45378/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773650480, "uuid": "e7f9cd00-2113-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.92.244:33415/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773650529, "uuid": "04e9ff93-2114-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-pat.yellglass.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773650828, "uuid": "b7673950-2114-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://true-mar.oilglass.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773651079, "uuid": "4d25dc94-2115-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.73.126.106:43071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773651080, "uuid": "4dab8df6-2115-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.64.32:51693/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773651187, "uuid": "8d8f63bf-2115-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://f4bric7-point.oilglass.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773652102, "uuid": "ae8ad0c8-2117-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.93.211:38848/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773652160, "uuid": "d140574b-2117-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:51998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773652283, "uuid": "1a824f33-2118-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.93.211:38848/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773652284, "uuid": "1af04757-2118-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.158.29:45378/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773652363, "uuid": "4a343d6a-2118-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.195.111:53904/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773652446, "uuid": "7bee2151-2118-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ap-field.onelight.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773652627, "uuid": "e7a715a1-2118-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sfb1sn6.onelight.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773652697, "uuid": "11481f1f-2119-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.64.32:51693/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773653485, "uuid": "e74f3313-211a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.195.111:53904/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773653536, "uuid": "05627018-211b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.137.230.45/1.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773653768, "uuid": "8fbd8460-211b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://qkmnf.blowoff.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773653949, "uuid": "fb65e02a-211b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gathe-core.blowoff.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773654135, "uuid": "6ac54bd2-211c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:51998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773654198, "uuid": "8fdb662e-211c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.125.123:33856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773654247, "uuid": "ad50ed26-211c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tgua.blowoff.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773654319, "uuid": "d837dffc-211c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.93.29:50754/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773654320, "uuid": "d8b58e64-211c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.125.134:58194/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773654678, "uuid": "ade4b569-211d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.183.202:36583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773654848, "uuid": "135a56b6-211e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://clip-ten.blowoff.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773655027, "uuid": "7e62e644-211e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ujsl.octagonon.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773655098, "uuid": "a883c16d-211e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7782139129/S6xWuZ1.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773655338, "uuid": "37accd90-211f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.83.134:40872/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773655567, "uuid": "bfe9670e-211f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyp3r8-stream.octagonon.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773655746, "uuid": "2acfc413-2120-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://lc94pexb.octagonon.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773655881, "uuid": "7b58821a-2120-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.137.158.208:51710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773655929, "uuid": "97fc2f9e-2120-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://swiftbasalt.octagonon.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773656170, "uuid": "272cc11b-2121-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.198.54:37507/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773656227, "uuid": "49bc4f9c-2121-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://draftharv.fabulos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773656587, "uuid": "202bdd6b-2122-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://slowdemand.fabulos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773656887, "uuid": "d31c7d9d-2122-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vordra3on.fabulos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657015, "uuid": "1f036629-2123-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.116.151:50971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657248, "uuid": "aa4b1c85-2123-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kel-forgeum.fabulos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657608, "uuid": "80b4b2cc-2124-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://depoff.flowwow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657908, "uuid": "332287fb-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pr0xy9-craft.flowwow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657916, "uuid": "38160ffd-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.83.134:40872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657966, "uuid": "55bdd6c1-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.219.23.145/wobbling-twitter/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657966, "uuid": "55bdd8b0-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.219.23.145/entangledcirculate", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657966, "uuid": "55bf696c-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.219.23.145/pampereddislocate", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657966, "uuid": "55c65319-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.219.23.145/deceit-freebie", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657966, "uuid": "55d908a8-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.219.23.145/skimokeep", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657966, "uuid": "55ed06dc-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://91.219.23.145/residentchatting", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657966, "uuid": "562f4053-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.219.23.145/wobbling-twitter/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657966, "uuid": "56350790-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.219.23.145/pampereddislocate", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657967, "uuid": "5675acba-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.219.23.145/entangledcirculate", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657968, "uuid": "56ec3f11-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.219.23.145/deceit-freebie", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657968, "uuid": "57441c96-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.219.23.145/residentchatting", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657970, "uuid": "58109ee6-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.219.23.145/skimokeep", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773657970, "uuid": "58399e42-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/4realgg/Helper-Update1.0/releases/download/update1/mw--58389c35-c76b-46ac-b33e-7efe83b65fda.zip/", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773658036, "uuid": "7fb7d1c2-2125-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.67.143:40270/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773658266, "uuid": "0892dc85-2126-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tr4d3-sheet.flowwow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773658453, "uuid": "780055f5-2126-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.68.239:41997/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773658454, "uuid": "789e42a7-2126-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.207.116.151:50971/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773658628, "uuid": "e0981d9a-2126-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://9069srn1.flowwow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773658758, "uuid": "2e45c8b8-2127-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.108.111.128:42218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773658866, "uuid": "6ea9cf6e-2127-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://96.44.159.250/img_212607.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773658926, "uuid": "924b41d0-2127-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://columnneedle.gronstat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773659287, "uuid": "699e4433-2128-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://uz51av.gronstat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773659299, "uuid": "70b663c8-2128-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.75.70:43991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773659587, "uuid": "1c449109-2129-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vinebay.gronstat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773659956, "uuid": "f7e0f351-2129-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.68.239:41997/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773659956, "uuid": "f7f3f5ce-2129-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.125.123:33856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773660251, "uuid": "a802ee4f-212a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dpwqj.gronstat.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773660728, "uuid": "c43af752-212b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://balancepilot.grosstao.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773660966, "uuid": "5237af2a-212c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vellitha7.grosstao.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773661266, "uuid": "051b0650-212d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solfluxet1.grosstao.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773661626, "uuid": "dbb4c163-212d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://p1tc2-logic.easttea.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773662048, "uuid": "d721bdd3-212e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://25vsikqn.easttea.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773662286, "uuid": "651d025b-212f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dbiecm.easttea.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773662791, "uuid": "91d05f2e-2130-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.75.70:43991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773662947, "uuid": "ee97258b-2130-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://trilithon.easttea.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773662957, "uuid": "f4e537f9-2130-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.152.61:34354/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773663126, "uuid": "59ae4a1c-2131-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://arrscre.norsdwest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773663196, "uuid": "836c195b-2131-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.9.29:46866/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773663369, "uuid": "ea7e7d3f-2131-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://3xten9-dock.norsdwest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773663608, "uuid": "78d261ec-2132-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://atomi-point.norsdwest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773663849, "uuid": "088614df-2133-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/6691015685/Nb2YOyu.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773663922, "uuid": "343dbec9-2133-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.152.61:34354/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773663968, "uuid": "4f322981-2133-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://camporgani.norsdwest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773664031, "uuid": "75236c8a-2133-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.76.43:44855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773664268, "uuid": "0237e85f-2134-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kggkm.backyard.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773664389, "uuid": "4a4b4e10-2134-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.112:60678/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773664389, "uuid": "4a96ecc5-2134-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.170.136.155:59216/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773664688, "uuid": "fce2a447-2134-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://passivecor.backyard.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773664702, "uuid": "04ab4daf-2135-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.89.110:50141/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773664928, "uuid": "8b9287e2-2135-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://measur0-mark.backyard.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773665348, "uuid": "85f9f6df-2136-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tal-meshex.backyard.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773665358, "uuid": "8bf96c7e-2136-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:49847/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773665468, "uuid": "cdb364c6-2136-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wiowyaea.lakebit.digital/?=check&&actmn=bQVRicjiWGHhxCEb", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773665647, "uuid": "3854b49c-2137-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://jyhl.cokenote.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773665954, "uuid": "eefcd94c-2137-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zbyhm.cokenote.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773666015, "uuid": "13b349ba-2138-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:49847/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773666015, "uuid": "13c1a962-2138-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.100.157:60664/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773666079, "uuid": "398fd7a6-2138-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.170.136.155:59216/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773666309, "uuid": "c2c0006d-2138-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://n0rt7-cast.cokenote.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773666853, "uuid": "06fa7ae6-213a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.128.66.77:34459/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773666910, "uuid": "29007785-213a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mer-drais.cokenote.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773666968, "uuid": "4b4c584b-213a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8283992944/RriJPMz.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773667101, "uuid": "9afdcaa3-213a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.83.0:60315/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773667148, "uuid": "b6d70999-213a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://keldraix.cokefun.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773667388, "uuid": "462bf2de-213b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://encproce.cokefun.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773667398, "uuid": "4c232f0c-213b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.68.46.54:44716/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773667450, "uuid": "6af0edf5-213b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.159.35:57851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773667530, "uuid": "9a5ca0d9-213b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.230.226:59389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773667628, "uuid": "d53ab047-213b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyncore5et.cokefun.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773667880, "uuid": "6b6d48fb-213c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.217.90:46467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773668108, "uuid": "f3001547-213c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://l0yal-grid.cokefun.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773668298, "uuid": "647bcd3b-213d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.187.149:33412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773668346, "uuid": "813946fd-213d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ub5309hp.jokerun.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773668478, "uuid": "cfa1751b-213d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.159.35:57851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773668606, "uuid": "1c32d15a-213e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.68.46.54:44716/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773668648, "uuid": "34b27ae2-213e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelvalear3.jokerun.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773669366, "uuid": "e1316649-213f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelline3a.jokerun.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773669499, "uuid": "30410e84-2140-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.153:58402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773669557, "uuid": "5275c159-2140-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.217.90:46467/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773669623, "uuid": "7a25446f-2140-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.83.0:60315/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773669849, "uuid": "00cc989c-2141-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://1huqs.highjoke.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773670029, "uuid": "6c17c1ca-2141-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://trace3-bridge.highjoke.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773670049, "uuid": "7835824d-2141-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.244.215:55530/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773670159, "uuid": "b9d626c0-2141-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.187.149:33412/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773670224, "uuid": "e07bf539-2141-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.25.96:59023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773670387, "uuid": "418b0a65-2142-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://4ldo6v.highjoke.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773670687, "uuid": "f429c9e6-2142-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://flh72g.highjoke.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773670697, "uuid": "fa3a423c-2142-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.91.134:43294/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773670704, "uuid": "fe4108b8-2142-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.91.134:43294/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773670881, "uuid": "67bdea8a-2143-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.68.37:50016/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773671050, "uuid": "cc708dad-2143-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://coretor.sandball.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773671072, "uuid": "d9f6a679-2143-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.108.60:53180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773671125, "uuid": "f98c79b8-2143-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.66.161:33573/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773671301, "uuid": "6203a1dc-2144-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.244.215:55530/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773671410, "uuid": "a311418f-2144-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://thyc.sandball.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773671709, "uuid": "55b3ffdc-2145-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://code-mesh.sandball.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773672067, "uuid": "2ab0df19-2146-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://scenecompr.sandball.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773672077, "uuid": "30a1402b-2146-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.79.155.28:34267/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773672429, "uuid": "026940d3-2147-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelspireal3.saltball.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773672444, "uuid": "0b5b43e4-2147-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.0.14:54431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773672788, "uuid": "d84bc5b6-2147-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ter1-loop.saltball.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773672794, "uuid": "dbe2f123-2147-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.134.43:55633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773672939, "uuid": "3270d381-2148-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.137.30:55268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773673028, "uuid": "67ccc273-2148-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bpdwtj.saltball.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773673402, "uuid": "4658cbfd-2149-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.148.65:56104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773673448, "uuid": "61f3c601-2149-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ewg75280.saltball.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773673694, "uuid": "f49ed02b-2149-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.79.155.28:34267/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773673747, "uuid": "146ba9a9-214a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://appjm.darkboll.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674000, "uuid": "aaf25fc5-214a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.148.65:56104/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674000, "uuid": "ab01ea4c-214a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.48.189:56056/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674048, "uuid": "c7851c69-214a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tru59-chain.darkboll.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674119, "uuid": "f1d55f8e-214a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.0.14:54431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674412, "uuid": "a0919cb7-214b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://trivale8et.darkboll.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674482, "uuid": "ca529923-214b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.134.43:55633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674482, "uuid": "ca627413-214b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.194.30:32821/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674649, "uuid": "2d9cba55-214c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.220.26:58512/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674767, "uuid": "73fe4a36-214c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://reage2-crest.darkboll.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773674959, "uuid": "e685c2cb-214c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.153.187:39049/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773675132, "uuid": "4d9ae308-214d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.231.22:43361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773675439, "uuid": "04f097b6-214e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.48.189:56056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773675668, "uuid": "8d0b62e3-214e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://snapsgene.inkpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773675860, "uuid": "ff888c12-214e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.0.32.149/gate.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773675908, "uuid": "1c40d0e3-214f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-f0x.inkpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773676274, "uuid": "f62dfcab-214f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.194.30:32821/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773676330, "uuid": "1800b385-2150-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8520831842/Z2IntHf.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773676346, "uuid": "217cfd6b-2150-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.78.243:54885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773676521, "uuid": "89e821ea-2150-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.63.205:39194/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773676567, "uuid": "a514984d-2150-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://compres6-well.inkpit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773676883, "uuid": "614891ca-2151-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.153.187:39049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773676998, "uuid": "a5f9c41a-2151-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.101.252:43339/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773677052, "uuid": "c64e5853-2151-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.78.243:54885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773677780, "uuid": "785126bd-2153-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.231.22:43361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773678010, "uuid": "012a3166-2154-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://clea-line.inksky.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773678375, "uuid": "da670815-2154-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.101.252:43339/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773678546, "uuid": "40d96c2d-2155-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://k56gfm6.tempiso.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773678787, "uuid": "d06cc4a3-2155-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gig0wg7.tempiso.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773678980, "uuid": "432d8fc6-2156-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.168.70:60284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773679090, "uuid": "84f2b7fa-2156-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quor-spireon.tempiso.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773679234, "uuid": "dae17bf1-2156-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.63.88:53303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773679636, "uuid": "ca09ef5a-2157-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.86.100:37933/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773680047, "uuid": "bf1a1113-2158-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solcresta1.tempink.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773680227, "uuid": "2a85c802-2159-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://norcrestal.tempink.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773680591, "uuid": "033b7ae8-215a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.168.70:60284/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773680777, "uuid": "72336bf2-215a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.63.88:53303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773680893, "uuid": "b787f39c-215a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.244.64.207:57996/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773681010, "uuid": "fd335de4-215a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://f3rn-trace.tempink.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773681187, "uuid": "669b9e62-215b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://studioalign.tempink.in.net/verification.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773681427, "uuid": "f60f3bea-215b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fund8-gate.fastpink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773681557, "uuid": "438fabcd-215c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.198.54:37507/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773681789, "uuid": "cd9d385f-215c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ky29r.fastpink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773682209, "uuid": "c7d59fb5-215d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://norlineis2.fastpink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773682626, "uuid": "c0b33838-215e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tal-coreal.fastpink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773682633, "uuid": "c4d60383-215e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.36.123:34986/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773683346, "uuid": "6dd9468b-2160-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://lab-v01-node.neurosync.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773683478, "uuid": "bc582768-2160-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.178.144:44761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773683586, "uuid": "fcc94db6-2160-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-x7-sync.neurosync.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773683826, "uuid": "8bc669ce-2161-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://result-z4-meta.neurosync.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773684187, "uuid": "62b3536d-2162-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://infra-v9-core.neurosync.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773684199, "uuid": "6a318135-2162-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.36.123:34986/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773684666, "uuid": "808365a8-2163-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://srv-x12-unit.enzymecore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773684966, "uuid": "334f4a7d-2164-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://app-v3-flow.enzymecore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773685685, "uuid": "dff1bb21-2165-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://web-90-cache.enzymecore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773685931, "uuid": "729c7bbe-2166-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://99.154.56.170:38138/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773685931, "uuid": "72b07475-2166-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.34.111.149:56488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773686108, "uuid": "dbae2e63-2166-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate-v1-entry.enzymecore.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773686347, "uuid": "6a5f86aa-2167-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud-v5-store.plasmaviva.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773687310, "uuid": "a8a6d74e-2169-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.190.162.101:60054/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773687311, "uuid": "a9041492-2169-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.63.61:51329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773687847, "uuid": "e88a9298-216a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sys-x8-monitor.biosphera.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773688213, "uuid": "c28a35a5-216b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hub-v11-local.biosphera.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773688327, "uuid": "06a55c09-216c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7782139129/VGAGvKd.msi", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773688388, "uuid": "2aadcf1f-216c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/8167064937/DAIs3ZV.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773688688, "uuid": "ddd42031-216c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.34.111.149:56488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773688931, "uuid": "6eaa372b-216d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow-z0-work.biosphera.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773689058, "uuid": "b9f603ea-216d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.21.172.164:47587/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773689106, "uuid": "d6af0af0-216d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://net-v6-global.biosphera.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773689412, "uuid": "8d84c5b2-216e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.242.135:34844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773689413, "uuid": "8deef826-216e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://trace-x1-alpha.genomax.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773689765, "uuid": "5fb6e5b1-216f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://shell-v9-core.genomax.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773689827, "uuid": "84bbdd0f-216f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7341834371/7AfcfsM.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773690185, "uuid": "5a2329cb-2170-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ghost-z2-node.genomax.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773690431, "uuid": "ec8ad439-2170-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.196.209:40874/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773690548, "uuid": "32755035-2171-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vision-v4-sync.genomax.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773690668, "uuid": "79bc674a-2171-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.208.7/files/7341834371/ZaB5quI.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691026, "uuid": "4f462b70-2172-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://room-v7-dark.opticlocus.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691158, "uuid": "9dfacf3c-2172-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.242.135:34844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691386, "uuid": "25c62ebb-2173-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bridge-x1-light.opticlocus.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691638, "uuid": "bbe49bf7-2173-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.34.48:58536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691806, "uuid": "2071d2db-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://scan-z9-point.opticlocus.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691820, "uuid": "2854119e-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spoofer.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691820, "uuid": "285c1087-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spoofer.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691820, "uuid": "285e788b-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spoofer.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691820, "uuid": "285e8ad0-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/cat.sh", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691820, "uuid": "28602e2a-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spoofer.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691820, "uuid": "28602eab-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spoofer.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691820, "uuid": "28607fc5-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spoofer.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691820, "uuid": "2860815d-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spoofer.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691820, "uuid": "28696a3e-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spoofer.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691820, "uuid": "286ab48d-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spoofer.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691820, "uuid": "286d60f6-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spoofer.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773691820, "uuid": "28719e98-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/spoofer.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773692057, "uuid": "b5da4a38-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.66.244:34322/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773692108, "uuid": "d4428bdd-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sync-v0-vision.opticlocus.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773692125, "uuid": "de85373e-2174-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.94.187:46073/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773692603, "uuid": "fb5ad76e-2175-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.196.209:40874/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773692886, "uuid": "a3eeca04-2176-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-v11-infra.medivault.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693067, "uuid": "0f9bea52-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://db-z3-point.medivault.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693141, "uuid": "3c292133-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.34.48:58536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693142, "uuid": "3c8db788-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://76.49.31.147:54653/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693308, "uuid": "9f9cd1fa-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://auth-x5-user.medivault.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693322, "uuid": "a7de24e3-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.94.187:46073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693365, "uuid": "c15d893c-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/ipcams.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693365, "uuid": "c1636e54-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/nvr.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693365, "uuid": "c1653014-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693369, "uuid": "c3a6db15-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tuxnokill.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693369, "uuid": "c3a72847-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tux.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693369, "uuid": "c3a7cdd6-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tuxnokill.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693369, "uuid": "c3a7d651-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tuxnokill.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693369, "uuid": "c3a9251e-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tuxnokill.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693369, "uuid": "c3b0e642-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tuxnokill.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693369, "uuid": "c3b56267-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tuxnokill.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693369, "uuid": "c3d4d4fa-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tuxnokill.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693369, "uuid": "c3d790a8-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://xwang02.com/xwang.xyz_v2.0.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693369, "uuid": "c3f3bca8-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.keaya.com/e/class/4044.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693369, "uuid": "c3ffcc48-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tuxnokill.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693369, "uuid": "c40781c0-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tuxnokill.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693370, "uuid": "c4475702-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://apkinsta.com/apk/APKInsta_v2.4.1.apk", "Tag": [ { "name": "Ahmyth", "colour": "#63fb4d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693370, "uuid": "c4aeb783-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://chromium-client.github.io/main/ChromiumClient-.jar", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693371, "uuid": "c4f944a1-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/decxda/Zinc-Client/refs/heads/main/Zinc_Client-3.2.1.jar", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693372, "uuid": "c56ce272-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://anondrop.net/1480759612251570226/1.png", "Tag": [ { "name": "TokGrabber", "colour": "#85b8e7", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693373, "uuid": "c60129a9-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wutb.voidarena.sbs/Visual%20Studio.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693373, "uuid": "c60a9854-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/decxda/bobevil-client/refs/heads/main/Bob_Evil-3.2.1.jar", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693373, "uuid": "c6307eb4-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://alternatifportbet88.blog/aplikasi/Portbet88.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693374, "uuid": "c67c3fb5-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-1ec2bbf13b3f4e7a9f948cb72ded816d.r2.dev/ScreenConnect.ClientSetup.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693378, "uuid": "c9154470-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://oldapp.top/static/apk_files/juniojsv.mtk.easy.su-210.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693381, "uuid": "cae10d54-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://oldapp.top/static/apk_files/com.youyu-1.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693381, "uuid": "cb325b6c-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-4d92724396914938abfc9555857af443.r2.dev/Zoom%20Setup.exe", "Tag": [ { "name": "DattoRMM", "colour": "#167832", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693382, "uuid": "cb59c260-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://oldapp.top/static/apk_files/com.github.tvbox.osc-1.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693388, "uuid": "cf433616-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wcdr.cyrb.live/Cyrex.zip", "Tag": [ { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693396, "uuid": "d3ba43db-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://19-wgdvxb-xbneiu-zbvxgg.oss-ap-northeast-2.aliyuncs.com/SafeWitopd_2631625632.zip", "Tag": [ { "name": "donutloader", "colour": "#4b5532", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693398, "uuid": "d539a9eb-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://venturewthrift.com/as.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693400, "uuid": "d6859532-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://qz.697539.com/q4/apzx48.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693427, "uuid": "e69ce21c-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tuxnokill.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693427, "uuid": "e6a7e0ea-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tuxnokill.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693428, "uuid": "e6b7a6a1-2177-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tuxnokill.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693502, "uuid": "1306162f-2178-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.190.22.80:47632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693681, "uuid": "7dc4384e-2178-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.66.244:34322/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693737, "uuid": "9f2805d2-2178-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.21.172.164:47587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693789, "uuid": "bdf46014-2178-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://net-v8-access.medivault.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693846, "uuid": "e04444eb-2178-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mountaingoats4sale.xyz/dab.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693847, "uuid": "e0e62960-2178-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mountaingoats4sale.xyz/AV12.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693847, "uuid": "e0ed9dd5-2178-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mountaingoats4sale.xyz/WDS.bat", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693920, "uuid": "0bf2d2f2-2179-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/bins/spoofer.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693920, "uuid": "0bf2dd87-2179-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/bins/spoofer.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693920, "uuid": "0bf2e03c-2179-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/bins/spoofer.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693920, "uuid": "0bf2eec6-2179-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/bins/spoofer.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693920, "uuid": "0bf2eff0-2179-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/bins/spoofer.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693920, "uuid": "0bf2fa39-2179-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/bins/spoofer.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693920, "uuid": "0bf3d551-2179-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.214.20.14/bins/tuxnokill.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693920, "uuid": "0bf50085-2179-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/bins/spoofer.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693920, "uuid": "0c0325d3-2179-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/bins/spoofer.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693921, "uuid": "0cb24d65-2179-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/bins/spoofer.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693921, "uuid": "0cb2bd3a-2179-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/bins/spoofer.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773693921, "uuid": "0cb3167a-2179-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.67/bins/spoofer.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773694147, "uuid": "937fde74-2179-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rim-x4-outer.chemflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773694147, "uuid": "93b9c6ac-2179-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.3:7777/noesisllc.online/fisherzxcc/fisherxx/tgckftbiqazqkklwtwtu7vhhnh6foxc.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773694522, "uuid": "731f6531-217a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.196.186:51842/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773694587, "uuid": "999de488-217a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.126.131:44175/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773695120, "uuid": "d769c716-217b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://vmi3152445.contaboserver.net/memory_bin_dir/memory_load.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773695166, "uuid": "f300c5c3-217b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://field-z1-vast.chemflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773695250, "uuid": "24e80bf7-217c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.232.193:39924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773695408, "uuid": "831b831c-217c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://space-x0-open.chemflow.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773695481, "uuid": "aece6c43-217c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.99.120:43343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773695766, "uuid": "5844f956-217d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://orbit-v7-moon.vitalocus.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773696029, "uuid": "f50c861c-217d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.99.120:43343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773696127, "uuid": "2f7216c4-217e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-z3-steel.vitalocus.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773696133, "uuid": "3358de71-217e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.126.131:44175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773696199, "uuid": "5adbf0b1-217e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.196.186:51842/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773696547, "uuid": "29e32bd3-217f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-x9-rock.vitalocus.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773696685, "uuid": "7c6d779f-217f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.118.34.218:60862/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773696856, "uuid": "e20b9e13-217f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.232.193:39924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773696908, "uuid": "017c2557-2180-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-v1-sat.vitalocus.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773696918, "uuid": "07582a8f-2180-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.187:34457/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773696926, "uuid": "0bf3a9a8-2180-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.199.92:48991/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773697223, "uuid": "bccb7fc6-2180-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.24.73.156:42919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773697267, "uuid": "d73b26a5-2180-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://web-v02-infra.cellanode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773697686, "uuid": "d0b8c7a2-2181-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gate-x8-proxy.cellanode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773698109, "uuid": "cd12f07c-2182-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sync-z3-data.cellanode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773698300, "uuid": "3eb533e1-2183-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.1.80:43304/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773698302, "uuid": "404f4d64-2183-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.118.34.218:60862/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773698420, "uuid": "866782fd-2183-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.187:34457/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773698475, "uuid": "a72f400a-2183-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.199.92:48991/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773698527, "uuid": "c621a4a0-2183-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-v1-point.cellanode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773698715, "uuid": "36532bd7-2184-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.99.125:37963/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773698767, "uuid": "5501c042-2184-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://u9-bal-01.terrafirma.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773699007, "uuid": "e4945f4a-2184-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://r3-mon-v8.terrafirma.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773699138, "uuid": "32aabb13-2185-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.91.31:38589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773699308, "uuid": "979ac1cb-2185-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://s1-ext-link.terrafirma.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773699442, "uuid": "e784eeb8-2185-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.245.255.226:38499/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773699667, "uuid": "6ddbecde-2186-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://n7-core-db.terrafirma.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773699737, "uuid": "97318042-2186-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.91.31:38589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773699967, "uuid": "20394d27-2187-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://x5-gate-33.arcostruttura.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773700329, "uuid": "f83fada1-2187-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://p1-sync-v9.arcostruttura.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773700398, "uuid": "219d5e30-2188-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.245.255.226:38499/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773700627, "uuid": "a9f9b665-2188-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://w2-web-cache.arcostruttura.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773700988, "uuid": "80da426f-2189-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://m8-app-unit.arcostruttura.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773701177, "uuid": "f1d5033b-2189-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.154.222:50789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773701240, "uuid": "17107c0d-218a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.164:45675/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773701347, "uuid": "5713942d-218a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://h4-node-00.pietraforte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773701598, "uuid": "ec638dcb-218a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.44:39722/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773701889, "uuid": "99f40b5b-218b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://k2-dist-x7.pietraforte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773702426, "uuid": "da35c825-218c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://v6-api-node.pietraforte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773702666, "uuid": "695614ac-218d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://b1-store-v2.basalticnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773702741, "uuid": "9624b2da-218d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.90.247:55592/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773702745, "uuid": "984dd20b-218d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.62.100:58800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773702969, "uuid": "1ded45d6-218e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://q4-sys-grid.basalticnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773702973, "uuid": "204ecca2-218e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.235.164:45675/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773703095, "uuid": "6937320c-218e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.44:39722/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773703158, "uuid": "8ec986db-218e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.179.97:10768/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773703327, "uuid": "f31ad96e-218e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://j3-hub-stat.basalticnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773703331, "uuid": "f563e0be-218e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.149:55767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773703516, "uuid": "63f712bf-218f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.8.113:35368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773703692, "uuid": "cccb5ad0-218f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://f8-flow-v11.basalticnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773703931, "uuid": "5b4dbfc6-2190-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.218.255:38914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773703987, "uuid": "7c85dda8-2190-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://l2-net-base.viametrica.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773704346, "uuid": "527cf3b0-2191-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://t5-auth-x4.viametrica.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773704422, "uuid": "7fbbb793-2191-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.21.121.71:34615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773704478, "uuid": "a13ecda0-2191-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.8.113:35368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773704708, "uuid": "2a8d3fac-2192-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.164.179.97:10768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773704767, "uuid": "4dcbfbe6-2192-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://g0-data-z9.viametrica.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773704899, "uuid": "9bed2e2f-2192-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.220.26:58512/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773704899, "uuid": "9c162894-2192-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.91.3.146:41601/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773705070, "uuid": "024a3731-2193-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://y1-point-v7.viametrica.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773705187, "uuid": "47fca627-2193-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.90.247:55592/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773705321, "uuid": "977fe97d-2193-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.210.194.175:39635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773705377, "uuid": "b906895c-2193-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.91.3.146:41601/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1773705486, "uuid": "fa5d3852-2193-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://d3-shell-0.columnasol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773641164, "uuid": "3745d8a6-20fe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "0g94h.tuneone.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773658746, "uuid": "26b5ec95-2127-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.108.111.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693485, "uuid": "08baf2a6-2178-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.190.22.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648365, "uuid": "fb117417-210e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "109.107.168.138", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773632407, "uuid": "d351df6f-20e9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.97.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642786, "uuid": "fdd0bf4b-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.77.170.38", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773652325, "uuid": "338faa46-2118-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.225.195.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773699425, "uuid": "dd9db4a9-2185-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.245.255.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773628924, "uuid": "b7db117e-20e1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.163.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631685, "uuid": "25876430-20e8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.134.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773705306, "uuid": "8ec110c9-2193-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.210.194.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773703924, "uuid": "575b5275-2190-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.218.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773644826, "uuid": "bdc9d8fb-2106-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.30.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773652086, "uuid": "a519b84e-2117-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.93.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773645065, "uuid": "4c6f7f10-2107-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.29.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773701164, "uuid": "e9fa9a01-2189-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.154.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773667866, "uuid": "62f8ae74-213c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.217.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773687306, "uuid": "a5b2e831-2169-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.63.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773632164, "uuid": "42b7571f-20e9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.188.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773651066, "uuid": "45293208-2115-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.64.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642786, "uuid": "fdd19846-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.69.80", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642965, "uuid": "68c58bec-2102-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.136.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773668284, "uuid": "5c341b35-213d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.187.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773654306, "uuid": "d04675c3-211c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.125.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773657007, "uuid": "1a85d77e-2123-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.207.116.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773623165, "uuid": "4f197f37-20d4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.210.212.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773630366, "uuid": "135fec70-20e5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.54.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773696906, "uuid": "001fc319-2180-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.199.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773680885, "uuid": "b2d86956-215a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.64.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773626764, "uuid": "b05750a1-20dc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.244.65.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773696664, "uuid": "6fe04c5b-217f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.118.34.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642786, "uuid": "fdd1116c-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.240.54", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642786, "uuid": "fdd302dd-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.142.70.6", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773643807, "uuid": "5e50d325-2104-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.226.150.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773687306, "uuid": "a5b207ea-2169-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.190.162.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773672426, "uuid": "0097f536-2147-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.0.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773667446, "uuid": "68bb2aa6-213b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.159.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773654186, "uuid": "88e69551-211c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.125.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773647587, "uuid": "2b55d582-210d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.186.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773646445, "uuid": "82bed582-210a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.6.167.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773670026, "uuid": "6a008027-2141-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.244.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773623045, "uuid": "077c2ca2-20d4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.113.147.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773632526, "uuid": "1a4b0da7-20ea-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.9.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773633606, "uuid": "9e620bfa-20ec-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.253.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773703506, "uuid": "5e0b72a5-218f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.8.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773692106, "uuid": "d2ed4362-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.94.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642786, "uuid": "fdd42da0-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.248.167.23", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773667508, "uuid": "8d6076d8-213b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.230.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773683465, "uuid": "b46dd418-2160-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.178.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691805, "uuid": "1f9119b6-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.67", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642726, "uuid": "da2ac010-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.228.164", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773694506, "uuid": "697346ce-217a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.196.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773690424, "uuid": "e8bb206a-2170-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.196.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773626824, "uuid": "d3e7bfcd-20dc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.205.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674944, "uuid": "dde545ca-214c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.153.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773632826, "uuid": "cd173145-20ea-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.60.14.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773645306, "uuid": "dc183feb-2107-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.128.66.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773653526, "uuid": "ffa7b283-211a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.137.230.45", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693367, "uuid": "c2b88b8d-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "19-wgdvxb-xbneiu-zbvxgg.oss-ap-northeast-2.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773669845, "uuid": "fea5c75d-2140-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "1huqs.highjoke.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773635166, "uuid": "3fd411f9-20f0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.161.47.138", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773685925, "uuid": "6ebe0a5d-2166-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "212.34.111.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773704405, "uuid": "75d10486-2191-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.21.121.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773702725, "uuid": "8c5be7f9-218d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.90.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773667386, "uuid": "44a4d3df-213b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.68.46.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773628626, "uuid": "05e478e0-20e1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.168.236.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773692044, "uuid": "ae02befb-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.66.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773699124, "uuid": "29db06a1-2185-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.91.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773672785, "uuid": "d69982eb-2147-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.134.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773622444, "uuid": "a17e070f-20d2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.243.172", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642786, "uuid": "fdd44b9d-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.141.29", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773676326, "uuid": "1589d998-2150-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.78.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773662044, "uuid": "d4b19b56-212e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "25vsikqn.easttea.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773622026, "uuid": "a7c82f88-20d1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.48.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773667086, "uuid": "91d0dcc7-213a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.83.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773697206, "uuid": "b2ea23dc-2180-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.24.73.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773694565, "uuid": "8c7cf246-217a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.126.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773679206, "uuid": "c9c20230-2156-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.63.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773672065, "uuid": "299d5b5f-2146-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.79.155.28", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773649206, "uuid": "f0a97ac4-2110-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.73.126.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773670685, "uuid": "f3495ec3-2142-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.88.91.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773704885, "uuid": "93fab4d9-2192-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.91.3.146", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773650226, "uuid": "5055cbb2-2113-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "3hca.yellglass.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773663368, "uuid": "e99d8872-2131-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "3xten9-dock.norsdwest.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773646207, "uuid": "f5115e61-2109-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.96.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773702725, "uuid": "8c5beb98-218d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.62.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773671107, "uuid": "ee61dd23-2143-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.66.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691625, "uuid": "b41911f5-2173-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.34.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674646, "uuid": "2bdb8182-214c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.220.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773647406, "uuid": "bfbcf4ed-210c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.219.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773679625, "uuid": "c40665ab-2157-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.86.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648307, "uuid": "d8819eaa-210e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.104.38", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773644046, "uuid": "ecde3777-2104-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.152.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773636845, "uuid": "28fc2169-20f4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.243.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773698706, "uuid": "30c5ff23-2184-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.99.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773625925, "uuid": "bbe9a1ff-20da-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.233.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773622325, "uuid": "5a05db2c-20d2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.138.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642786, "uuid": "fdd6d140-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.143.167.210", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642786, "uuid": "fdd58e8c-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.6.12.101", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642786, "uuid": "fdd6a012-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.6.6.235", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773670386, "uuid": "409871da-2142-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "4ldo6v.highjoke.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773643867, "uuid": "82211604-2104-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.177.109.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773654666, "uuid": "a6c2b7f6-211d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.183.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773624066, "uuid": "67c74df6-20d6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.124.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773671047, "uuid": "cb1c0176-2143-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.108.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648307, "uuid": "d8819561-210e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.42.91.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642786, "uuid": "fdd5c4a6-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.149.106", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773641286, "uuid": "7fb7855a-20fe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.255.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773670207, "uuid": "d625552c-2141-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.25.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773670866, "uuid": "5f213d16-2143-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.68.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773652445, "uuid": "7b04b121-2118-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ap-field.onelight.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773643147, "uuid": "d51318da-2102-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5cann5-wave.taketwo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773672785, "uuid": "d6a4b362-2147-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ter1-loop.saltball.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773625805, "uuid": "7494c8b4-20da-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.9.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773689046, "uuid": "b35b0f04-216d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.21.172.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773695224, "uuid": "15bfae5f-217c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.232.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773695465, "uuid": "a55d7597-217c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.99.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773622026, "uuid": "a7c87ec2-20d1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.156.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773656166, "uuid": "24d720ca-2121-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.198.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642786, "uuid": "fdd3d4ef-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.210.241", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648185, "uuid": "90409c5e-210e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "6gx6.dotnet.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773675845, "uuid": "f6f2348c-214e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "74.0.32.149", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693125, "uuid": "32162c87-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "76.49.31.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642786, "uuid": "fdd5e50d-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.25.45.248", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773624786, "uuid": "14f36df2-20d8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.101.204.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642786, "uuid": "fdd50570-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.47.251.189", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773658627, "uuid": "dfa9c92e-2126-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "9069srn1.flowwow.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773694144, "uuid": "92021d04-2179-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.242.3", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1773619565, "uuid": "ed1fddb5-20cb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "99.154.56.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773628686, "uuid": "29b25f1b-20e1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "a4-scan-point.puroflusso.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773646507, "uuid": "a81ea529-210a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ad65x.omnifree.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693365, "uuid": "c1968d1d-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "alternatifportbet88.blog" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773638345, "uuid": "a7395c14-20f7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "api8-well.slowcube.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693365, "uuid": "c153e428-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "apkinsta.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773684964, "uuid": "31eed64d-2164-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "app-v3-flow.enzymecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773673745, "uuid": "1340e1a1-214a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "appjm.darkboll.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773663125, "uuid": "58c80ae9-2131-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "arrscre.norsdwest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773635707, "uuid": "82ba64a1-20f1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "assetproxy.catflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773663606, "uuid": "776e6689-2132-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "atomi-point.norsdwest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693306, "uuid": "9e6a976d-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "auth-x5-user.medivault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773622145, "uuid": "eec28774-20d1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "b1-cloud-store.terralibre.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773702665, "uuid": "68669a1c-218d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "b1-store-v2.basalticnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631086, "uuid": "c003c39a-20e6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "b9-base-steel.secretovalle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773660726, "uuid": "c2dafc78-212b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "balancepilot.grosstao.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773692884, "uuid": "a2cd95ce-2176-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-v11-infra.medivault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773696125, "uuid": "2e486b6e-217e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-z3-steel.vitalocus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773673026, "uuid": "6667f410-2148-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bpdwtj.saltball.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691384, "uuid": "24a7c9ee-2173-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bridge-x1-light.opticlocus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773622026, "uuid": "a7d7b555-20d1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "c2-core-sync.focozero.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773663965, "uuid": "4d695c3d-2133-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "camporgani.norsdwest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773636125, "uuid": "7bdac5b0-20f2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cavvoya.catflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773637206, "uuid": "00450c1b-20f5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cedar-focu.catflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773634085, "uuid": "bbece63e-20ed-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "channelash.ratflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693365, "uuid": "c1407e3e-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "chromium-client.github.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773678008, "uuid": "ffbf443f-2153-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "clea-line.inksky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773654845, "uuid": "11fe6a72-211e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "clip-ten.blowoff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773686345, "uuid": "691219b9-2167-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloud-v5-store.plasmaviva.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773671708, "uuid": "54a97177-2145-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "code-mesh.sandball.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773658924, "uuid": "91207416-2127-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "columnneedle.gronstat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773676565, "uuid": "a421be43-2150-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "compres6-well.inkpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773696545, "uuid": "29207de5-217f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "core-x9-rock.vitalocus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773671048, "uuid": "cb2869d7-2143-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "coretor.sandball.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773705485, "uuid": "f9551835-2193-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "d3-shell-0.columnasol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773624665, "uuid": "ccdff86b-20d7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "d8-net-global.velocicorsa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773683584, "uuid": "fbba6232-2160-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-x7-sync.neurosync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693065, "uuid": "0eb8b978-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "db-z3-point.medivault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773662285, "uuid": "6464d10b-212f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dbiecm.easttea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773650526, "uuid": "03817e88-2114-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-pat.yellglass.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773657606, "uuid": "7f80a4d9-2124-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "depoff.flowwow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773660248, "uuid": "a6049255-212a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dpwqj.gronstat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773656226, "uuid": "48e2f0c9-2121-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "draftharv.fabulos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773667627, "uuid": "d420fcce-213b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyncore5et.cokefun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773628385, "uuid": "7657a965-20e0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "e6-bridge-light.puroflusso.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773667386, "uuid": "44b3af64-213b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "encproce.cokefun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773673445, "uuid": "606c03f8-2149-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ewg75280.saltball.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773635048, "uuid": "f9c76824-20ef-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ewt2o.catflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773681005, "uuid": "fa59d093-215a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "f3rn-trace.tempink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773625025, "uuid": "a3d065ae-20d8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "f4-base-infra.velocicorsa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773651186, "uuid": "8cb09fe7-2115-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "f4bric7-point.oilglass.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773703687, "uuid": "c9c46bed-218f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "f8-flow-v11.basalticnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773695164, "uuid": "f193f83f-217b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "field-z1-vast.chemflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773670685, "uuid": "f3533ec1-2142-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "flh72g.highjoke.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773688926, "uuid": "6bdc322e-216d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "flow-z0-work.biosphera.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773645306, "uuid": "dc2e5690-2107-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fund-lab.takefree.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773681424, "uuid": "f4296667-215b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fund8-gate.fastpink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773704766, "uuid": "4cbd0bde-2192-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "g0-data-z9.viametrica.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773625445, "uuid": "9dba67df-20d9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "g7-db-point.velocicorsa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773635407, "uuid": "cf7c040e-20f0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gard-cano.catflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773686106, "uuid": "da9f70bd-2166-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate-v1-entry.enzymecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773697684, "uuid": "cfcd1787-2181-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gate-x8-proxy.cellanode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773640446, "uuid": "8b5b7a1a-20fc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gateext.tuneone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773653947, "uuid": "fa50a944-211b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gathe-core.blowoff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773675906, "uuid": "1b27acff-214f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-f0x.inkpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773690184, "uuid": "5961dada-2170-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ghost-z2-node.genomax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773678785, "uuid": "ceebf5c5-2155-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gig0wg7.tempiso.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773640145, "uuid": "d819f915-20fb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "glyp-line.tuneone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773634745, "uuid": "457086a4-20ef-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "goo8039f.catflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773634386, "uuid": "6f066876-20ee-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gvo7j.ratflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773624186, "uuid": "af4006a9-20d6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "h3-hub-local.ombragrigia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773701344, "uuid": "5580bc83-218a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "h4-node-00.pietraforte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773688209, "uuid": "bffea649-216b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hub-v11-local.biosphera.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648185, "uuid": "905450f4-210e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hydrax.live" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773655565, "uuid": "bef67adc-211f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyp3r8-stream.octagonon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773627906, "uuid": "58da383c-20df-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "i1-vision-sync.duronodo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642845, "uuid": "216bc871-2102-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ijsbcf.taketwo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773684185, "uuid": "61b38794-2162-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "infra-v9-core.neurosync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773624367, "uuid": "1b4c44f2-20d7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "j1-flow-work.ombragrigia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773703325, "uuid": "f1d6832d-218e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "j3-hub-stat.basalticnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773633011, "uuid": "3b7f1a4c-20eb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "j9-main-point.ferroviva.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773665646, "uuid": "37605f81-2137-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "jyhl.cokenote.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773701884, "uuid": "97641b8d-218b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "k2-dist-x7.pietraforte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773619626, "uuid": "1197348e-20cc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "k4-sync-auth.ventonovo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773678545, "uuid": "3fc81b6f-2155-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "k56gfm6.tempiso.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773629346, "uuid": "b32a2dd5-20e2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "k9-rim-outer.altasphera.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773657246, "uuid": "a8f8ab0f-2123-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kel-forgeum.fabulos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773648545, "uuid": "668004c4-210f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kel-meshum.dotnet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642486, "uuid": "4b498479-2101-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kel-tideen.tunetwo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773667146, "uuid": "b5893853-213a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "keldraix.cokefun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773649748, "uuid": "33981d7d-2112-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelforge1al.rassvet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773669365, "uuid": "e05dc480-213f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelline3a.jokerun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773672426, "uuid": "00e345b5-2147-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelspireal3.saltball.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773668646, "uuid": "3397d02b-213e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelvalear3.jokerun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773664266, "uuid": "00df2701-2134-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kggkm.backyard.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773681785, "uuid": "cb58fb45-215c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ky29r.fastpink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773668105, "uuid": "f18599d9-213c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "l0yal-grid.cokefun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773703985, "uuid": "7b25e16d-2190-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "l2-net-base.viametrica.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773625687, "uuid": "2e0c9a48-20da-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "l9-auth-user.velocicorsa.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773683345, "uuid": "6cdcc191-2160-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "lab-v01-node.neurosync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773639426, "uuid": "2b71036d-20fa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "launchwind.tunefour.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773655745, "uuid": "29f7f766-2120-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "lc94pexb.octagonon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773696906, "uuid": "0028e662-2180-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "link-v1-sat.vitalocus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773633366, "uuid": "0f6518c8-20ec-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "lte05ohe.ratflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773620345, "uuid": "be4b13fb-20cd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "m1-infra-static.ventonovo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773700984, "uuid": "7ee233b1-2189-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "m8-app-unit.arcostruttura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773629045, "uuid": "ffa85156-20e1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "m8-sync-vision.puroflusso.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773698525, "uuid": "c4e071b2-2183-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-v1-point.cellanode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773647167, "uuid": "31283dc8-210c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "massivereagen.highligh.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773646145, "uuid": "d0061f17-2109-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mc9wq0.omnifree.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773664926, "uuid": "8a66282b-2135-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "measur0-mark.backyard.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773666908, "uuid": "27bf4e70-213a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mer-drais.cokenote.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773644108, "uuid": "11abee26-2105-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "modelultra.takefree.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693844, "uuid": "df31e092-2178-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mountaingoats4sale.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773666307, "uuid": "c1a81f31-2138-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "n0rt7-cast.cokenote.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773630785, "uuid": "0cbab289-20e6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "n4-orbit-moon.secretovalle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773699665, "uuid": "6c8cebc0-2186-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "n7-core-db.terrafirma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773622385, "uuid": "7e26c419-20d2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "n8-api-remote.terralibre.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773645065, "uuid": "4c7eb184-2107-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ndhxikv.takefree.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773689104, "uuid": "d5d51e65-216d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "net-v6-global.biosphera.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693785, "uuid": "bbc3e27b-2178-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "net-v8-access.medivault.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773680225, "uuid": "2997672d-2159-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "norcrestal.tempink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773682206, "uuid": "c66a8384-215d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "norlineis2.fastpink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773647466, "uuid": "e3c3feef-210c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "notifiersenso.gobright.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693366, "uuid": "c1ce9ba7-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "oldapp.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773695764, "uuid": "57720cf4-217d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "orbit-v7-moon.vitalocus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773623945, "uuid": "1febc674-20d6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "p0-link-power.ombragrigia.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773700325, "uuid": "f60cd6ce-2187-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "p1-sync-v9.arcostruttura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773661624, "uuid": "da7ecb6b-212d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "p1tc2-logic.easttea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773632345, "uuid": "aea9f4fe-20e9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "p7-gate-proxy.ferroviva.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773643807, "uuid": "5e5bcf8d-2104-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "partnerdust.taketwo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773664686, "uuid": "fb5d0c3e-2134-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "passivecor.backyard.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773647885, "uuid": "dd0950a0-210d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "plasmatransmit.gobright.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773657906, "uuid": "32188850-2125-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pr0xy9-craft.flowwow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693365, "uuid": "c13968ea-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-1ec2bbf13b3f4e7a9f948cb72ded816d.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693365, "uuid": "c146221c-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-4d92724396914938abfc9555857af443.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631326, "uuid": "4f1a9109-20e7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "q1-core-rock.secretovalle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773622685, "uuid": "30db1c09-20d3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "q4-dev-host.terralibre.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773702964, "uuid": "1b151370-218e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "q4-sys-grid.basalticnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773653766, "uuid": "8e9136b7-211b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "qkmnf.blowoff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773679086, "uuid": "826e74bf-2156-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quor-spireon.tempiso.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693366, "uuid": "c1ee2663-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "qz.697539.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773623045, "uuid": "07889709-20d4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "r2-gate-entry.terralibre.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773699006, "uuid": "e38c00b0-2184-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "r3-mon-v8.terrafirma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773631686, "uuid": "25925045-20e8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "r5-link-sat.secretovalle.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674765, "uuid": "7329fc02-214c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "reage2-crest.darkboll.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773683825, "uuid": "8aebfb89-2161-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "result-z4-meta.neurosync.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773694145, "uuid": "9210ac53-2179-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rim-x4-outer.chemflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773637029, "uuid": "96aa9d93-20f4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rn1x-mesh.catflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691025, "uuid": "4e634b5f-2172-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "room-v7-dark.opticlocus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773643446, "uuid": "872cc0c6-2103-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rural-ash.taketwo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773699305, "uuid": "95f4d9fb-2185-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "s1-ext-link.terrafirma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773632046, "uuid": "fc457a3b-20e8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "s3-web-infra.ferroviva.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773691805, "uuid": "1fa0f411-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "scan-z9-point.opticlocus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773672065, "uuid": "29aea652-2146-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "scenecompr.sandball.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773645486, "uuid": "4706b313-2108-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ser-fluxa.omnifree.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773639785, "uuid": "013591eb-20fb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sercrestet.tunefour.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773652625, "uuid": "e682a30e-2118-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sfb1sn6.onelight.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773689764, "uuid": "5ec82bd8-216f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "shell-v9-core.genomax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773656585, "uuid": "1f0b2693-2122-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "slowdemand.fabulos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773675665, "uuid": "8b9e029d-214e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "snapsgene.inkpit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773680044, "uuid": "bdba11ce-2158-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solcresta1.tempink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773661265, "uuid": "04209667-212d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solfluxet1.grosstao.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773695406, "uuid": "8232578c-217c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "space-x0-open.chemflow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773684665, "uuid": "7fa050e2-2163-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "srv-x12-unit.enzymecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773633725, "uuid": "e512da3c-20ec-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "storybroad.ratflat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773681185, "uuid": "65c415ca-215b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "studioalign.tempink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773655926, "uuid": "95bdcabd-2120-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "swiftbasalt.octagonon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773692106, "uuid": "d2f54544-2174-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sync-v0-vision.opticlocus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773698105, "uuid": "caa3b417-2182-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sync-z3-data.cellanode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773687845, "uuid": "e74afe23-216a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sys-x8-monitor.biosphera.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773619325, "uuid": "5e44ca42-20cb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "t0-node-edge.ventonovo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773704344, "uuid": "51a858c1-2191-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "t5-auth-x4.viametrica.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773682624, "uuid": "bf7436f3-215e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tal-coreal.fastpink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773645907, "uuid": "420cf2d0-2109-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tal-lithum.omnifree.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773665345, "uuid": "84584ecd-2136-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tal-meshex.backyard.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773640745, "uuid": "3d4cc668-20fd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "talfluxa.tuneone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773654246, "uuid": "ac615ab9-211c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tgua.blowoff.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773671408, "uuid": "a2132e1b-2144-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "thyc.sandball.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773646867, "uuid": "7e6aec89-210b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "timb3r-cast.highligh.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773642066, "uuid": "50f91dd7-2100-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tirs47so.tunetwo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773658264, "uuid": "0797e140-2126-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tr4d3-sheet.flowwow.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773689409, "uuid": "8ba22473-216e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "trace-x1-alpha.genomax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773670028, "uuid": "6b4ca80f-2141-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "trace3-bridge.highjoke.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773662945, "uuid": "eda0282a-2130-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "trilithon.easttea.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674406, "uuid": "9ce3b98d-214b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "trivale8et.darkboll.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773674046, "uuid": "c67c8a3d-214a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tru59-chain.darkboll.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773650826, "uuid": "b663fcb7-2114-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "true-mar.oilglass.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773698765, "uuid": "5418631d-2184-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "u9-bal-01.terrafirma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773668345, "uuid": "8049b844-213d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ub5309hp.jokerun.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773655026, "uuid": "7d6bafbe-211e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ujsl.octagonon.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773659286, "uuid": "689428fe-2128-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "uz51av.gronstat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773628025, "uuid": "9fb77582-20df-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "v0-room-dark.puroflusso.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773702424, "uuid": "d944b186-218c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "v6-api-node.pietraforte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773620647, "uuid": "7254d5bd-20ce-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "v7-srv-gate.focozero.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773660965, "uuid": "513b07c3-212c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vellitha7.grosstao.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773641465, "uuid": "eada5e52-20fe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "velnex7is.tunetwo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693365, "uuid": "c14bcadb-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "venturewthrift.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773659586, "uuid": "1b4e4602-2129-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vinebay.gronstat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773690545, "uuid": "305d7225-2171-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vision-v4-sync.genomax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773695108, "uuid": "d06c1c37-217b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vmi3152445.contaboserver.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773656885, "uuid": "d1b3a0b3-2122-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vordra3on.fabulos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773700624, "uuid": "a86715f7-2188-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "w2-web-cache.arcostruttura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773619985, "uuid": "e7750bed-20cc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "w9-dist-meta.ventonovo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693367, "uuid": "c274cf8d-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wcdr.cyrb.live" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773685684, "uuid": "def43e62-2165-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "web-90-cache.enzymecore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773697265, "uuid": "d61ba0bf-2180-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "web-v02-infra.cellanode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773665465, "uuid": "cbd02717-2136-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wiowyaea.lakebit.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693366, "uuid": "c1c20f8a-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wutb.voidarena.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773644526, "uuid": "0b30b5a3-2106-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wvswfck.takefree.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693366, "uuid": "c1be06a2-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.keaya.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773630607, "uuid": "a2a5f47c-20e5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "x0-space-open.altasphera.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773699965, "uuid": "1f505d23-2187-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "x5-gate-33.arcostruttura.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773621365, "uuid": "1ded9ae9-20d0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "x5-web-proxy.focozero.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773693365, "uuid": "c149f83e-2177-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "xwang02.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773705067, "uuid": "0024ba53-2193-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "y1-point-v7.viametrica.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773626044, "uuid": "0342d19e-20db-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "y2-trace-alpha.duronodo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773641766, "uuid": "9dcdb1ff-20ff-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ycmfs.tunetwo.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773620945, "uuid": "23b94499-20cf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "z3-app-data.focozero.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1773665948, "uuid": "ebbf511d-2137-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zbyhm.cokenote.in.net" } ] } }